#zmap

Zmap - A Fast Single Packet Network Scanner Designed For Internet-wide Network Surveys #Designed #ethernet #fast

ZMap is a fast single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable scanning the entire public IPv4 address space in under 45 minutes. With a 10gigE connection and PF_RING, ZMap can scan the IPv4 address space in under 5 minutes. ZMap operates on GNU/Linux, Mac OS, and BSD. ZMap currently has…

Sunday Round up for the week ending the 22nd of January 2017:

Articles:

We reverse engineered 16000 apps, here’s what we found: https://hackernoon.com/we-reverse-engineered-16k-apps-heres-what-we-found-51bdf3b456bb#.lhpi4nksy

ZGrab – Application Layer Scanner For ZMap: http://www.darknet.org.uk/2017/01/zgrab-an-application-layer-scanner-for-zmap/

Stapler Walkthrough: http://resources.infosecinstitute.com/stapler-walkthrough/

Integrate WHONIX with Kali Linux to Achieve Anonymity: http://resources.infosecinstitute.com/integrate-whonix-with-kali-linux-to-achieve-anonymity/

Re-Hacking The Samsung Smartcam: https://blog.exploitee.rs/2017/re-hacking-the-samsung-smartcam/

Reversing the Parrot SkyController Firmware: http://thecyberrecce.net/2017/01/09/reversing-the-parrot-skycontroller-firmware/

Twitter:

"Student Faces 10 Years In Prison For Creating And Selling Limitless Keylogger" #infosec #feedly https://t.co/aZve6w0yV0

— The Security Sleuth (@Security_Sleuth) January 15, 2017

"Court Documents Reveal How Feds Spied On Connected Cars For 15 Years" #infosec #feedly https://t.co/pvLvAVGGBg

— The Security Sleuth (@Security_Sleuth) January 16, 2017

""The Cloud is Evil..."" #forensics #feedly https://t.co/pHYksO86uG

— The Security Sleuth (@Security_Sleuth) January 17, 2017

"Newly discovered Mac malware found in the wild also works well on Linux" #informationsecurity #feedly https://t.co/b4vthx75yF

— The Security Sleuth (@Security_Sleuth) January 18, 2017

"ProtonMail launches Tor hidden service to dodge totalitarian censorship" #infosec #feedly https://t.co/TuiPgWP4Ep

— The Security Sleuth (@Security_Sleuth) January 19, 2017

Read last weeks round up here

¿CÓMO ESCANEAR TODO INTERNET 3.7 MIL MILLONES DE IP’S EN POCOS MINUTOS?

Profesionales de hacking ético y servicios de auditoría de seguridad informática normalmente usan escáner para revisar la seguridad. Escaneo de todas las direcciones IP en Internet no es un trabajo fácil, y si usted no tiene los recursos de un botnet, un simple escaneo puede tomar meses. Va a ser muy difícil, si usted quiere tomar una grande foto de internet porque hacer un escaneo de las redes…

The other week I found a tool called Zmap. Zmap is a tool that allows you to port scan the entire internet in a short amount of time. With a 1gbps uplink you can scan the whole internet in 45 minutes.

Disclaimer - This kind of scan is frowned upon. There are quite a few people who don't seem to like having all of their computers on their network scanned in seconds.

Testing out the tool, I found that scanning the whole internet, 0.0.0.0/0, at my home would take about 30 hours to complete. This is without any other computer on my network using the internet at all.

Onto another host! I decided to move over to another host to start the scan. With them I was able to scan the entire internet in about 3 hours. In that time I got 5 abuse complaints and then banned from that host.

Whoops.

The port I was scanning was port 25565, the default Minecraft port. I managed to get the list off of the server. The list can be found here. The list contains about one million IPs of computers with the port 25565 open.

Of course most of those IPs weren't actually Minecraft servers, or they just had the port open. After running a quick python script that I made, I made a new list with the motd, max players, current player, and IPs of all of the minecraft servers in that list. The list can be found here.

Getting started with zmap in Kali Linux 

At the time of posting, the only other zmap video on youtube was actually a clip of someone using zenmap /facepalm. With that I decided to whip out a quick video demonstrating everything you need to get started using zmap in Kali. Scan responsibly. 

http://ecstaticsec.tumblr.com   Gifs with a side security

----commands----

http://pastebin.com/raw.php?i=RP4qV2DJ

leafpad /etc/apt/sources.list

## Regular repositories

deb http://http.kali.org/kali kali main non-free contrib

## Source repositories

deb-src http://http.kali.org/kali kali main non-free contrib

apt-get update

apt-get install dwarfdump build-essential cmake libgmp3-dev libpcap-dev gengetopt byacc flex git 

apt-get clean

cmake -DENABLE_HARDENING=ON

make 

make install

zmap -h