Forum: IDS & Scanner Discussions

From Fyodor..... Nmap hackers, I am pleased to release Nmap 3.75, which contains dozens of improvements over 3.70. One of the most important...

I'm trying to find 1 last set of programs for my rig, and that's a good HIPS/IDPS. I currently have NIS-2012 (which I guess you can consider a...

Anyone ever heard of the program: "All-Seeing Eye" by Fortego? It's a proactive IDS that monitors: Auto Exe, DLLs, Registry, etc. ...

Hi, I am getting logs from my router(Netgear) but I dont know what this is or which machine on the network is generating this. Can anyone help me?...

Ok.. so here's a question I got recently. Can virtualized apps be scanned? Thinking of apps that are packaged by the likes of App-V, ThinApp, Wyse...

Anyone here using OSSEC for a host based IDS in a Windows environment? If so, how do you like it? I've been toying with it for a while and have it...

I was wondering if there was a way to change how a port scan like nmap views service versions, or a way to spoof it so that it thinks it's something...

I haven't tried this yet, but it's on the Give Away of the Day for another twelve hours if anyone wants it. http://www.giveawayoftheday.com/sax2/

Ok, I've been tumping a lot of traffic with the command: tcpdump -i eth1 -s 1500 -X -vvv -w packetlog. Now, when I try to read the capture into...

Dear friends, I'm new here and I'm not sure if my question might seems so dummy to you so excuse me if it's not a right place to ask it. I used...

Hi Guys, Quick question about IDS event logging. If I see an "Attacker Address" of 0.0.0.0, is it safe to assume that the source was spoofed? ...

im not sure if this is the right place to ask for help, so please let me know... i am trying to do the following using libnet & libpcap: -...

Please give the reference where it is possible to download FTP and NT Scanner by Lomax In GOOGLE it is impossible to find (

Comodo, who supply free security software applications have started a new site to help people test their personal PC's security: ...

This has been interesting... It started out as a comparison between nmap and UnicornScan and the recently released PortBunny. The results were...

FYI For those that use files from bleedingthreats.net ( or bleedingthreats.com ) there seems to be a problem with the sites. From The...

how to check up directory chmods (i dont know how it is called on english - directory access properties) if i know full way to derictory in system

Anyone seen this type of activity?: On 11/29, an internal workstation appeared to perform UDP portscans to 27 unique external IPs. All the...