Printable View
Whats the best port scanner out there? I want a good one so I can chck my home LAN for any valnurabilites. I got netscan from www.networkpunk.com , but its to generic.
please dont tell me to visit a port scanning web site, I want software that lets me do it manually. Thanx
Nmap all the way! ;) Get it here--> Nmap
he he it is a matter of personal opinion here but I do prefer a couple of apps
I use NMAP, Superscan (if you can find it), and a nifty little win utility called IP-Tools (available from tucows along with a barrage of other tools).
NMAP probably offers the most configuration and controllability where superscan is just a nifty quick scanner. IP-tools gives you other add ins like nb name scanners, host ping monitors, ping traces and the like.
I use NetScan tools but i forget the site that i got it from. Search on google for it (netscan tools 4.3). I also have the scanner superscan 3.0 from network punk. I would get Netscan tools 4.3 b/c it has alot more than just a scanner. -Twisted-
i agree with the majority here...nmap is 'THE' port scanner.
You may be interested in trying out LANgaurd too, as it can help identify vulnerabilities and provide links to patches/workarounds.
You really should give GFI LANguard Network Security Scanner 3.0 a try you can download it here @ http://download.com.com/3000-2092-10...ml?tag=lst-0-1
Hope this helps.Quote:
GFI LANguard Network Security Scanner (LNSS) is a freeware tool to audit network security and proactively secure it. LNSS scans entire networks from a 'hacker's' perspective, and analyses machines for open ports, shares, security alerts/vulnerabilities, service pack level, installed hotfixes and other NETBIOS information such as hostname, logged on user name, users etc. It does OS detection, password strength testing and detects registry issues.
:) FREAKIN NMAP!!!!!
If your on linux look into getting nessus it's a free vulnerability/exploit scanner
also comes with a port scanner.www.nessus.org
Nessus is great. It uses NMAP as its port scanner too, so you have the options you would find if you were using the port scanner alone. The mail list for Nessus is very helpful -high-volume, but helpful.
nmap is great tool, but every ids is updating their signature as new release comes out by fyodor. you should check out insecure.org for the top 75 tools also.
w0rm3y
My favorites are Nmap,Nessus,Amap :cool:
I don't agree being an XP user I have had nothing but probelms with nmap. I personally would recomend PortScan by Raw Logic. http://www.rawlogic.com
okay, I surfed around networkpunk.com for a while - its a mainly Windows oriented website. Therefor there's an important rule you must understand:
- Don't use NMap on Windows because it sucks big hairy ass.
Thats all really. I dual boot with Win2kPro. The scanners I use are:
Those, quite simply put, just own.
[P.S. - It is just me, or does networkpunk.com hold the same catchy phrase that AO uses? The "Hackers know the weakness to your system. Shouldn't you?"...hrm... odd.]
I`d go with NMAP if you have Linux, and Superscan if you have Windows as NMAP on Windows sucks. However, Port Scanners are going show your Ports that are open, which will help you identify some vulnerabilities (i.e. if there are services running that you don`t know about).
However to identify a larger numver of Vulnerabilities you should run a vulnerability scanner, if you have Linux then get hold of a copy of Nessus, if you have Windows then there are a few free scanning tools out there (Saint, Sara, Leviathan, Pluto, Cerberus-an early version is still free, etc..) and then lots of commerical packages (ISS Internet Scanner, Foundstone Foundscan, EEye Retina, Webtrends Security Analyzer and many more). I`d go with Nessus if you can, unless you want to lay out the cash for one of the scanning tools.
<hacking exposed typeover>
*nix: nmap (www.insecure.org) is great, netcat (www.l0pth.com) to
win: netcat (www.l0pth.com), lan-guard for the lan's (d'oh, see other post of someone else), wspingpro, ip-tools, just pick one. For a LAN scan I'd go with lan-guard, that programm has some real interesting stuff aboard
some other nice stuff is nessus and cheops and google
i got a very small, simple and fast port scanner for windows it has (i think all the features)
its name is Angry IP Scanner
if you cant find it i can post it
First off, nMapWin fro insecure.org sucks badly, so don't use it. If you want nMap on windows use eEye's nMapNT, it works correctly.
Secondly, are you just seeking a port scanner? Or a security scanner, vulnerability scanner, etc? If you are seeking these things for windows, you are in luck.
eEye's Retina tool is far and away the best scanner of this type, in fact its CHAM technology has made it the only scanner I know of to have actually _discovered_ new exploits and has bugtraq submissions. :)
catch
Yes plz post were i can fiind the angry port scanner and Eeyes NmapNT. I would appreciate it guys
http://www.eeye.com
catch
nmap 3.28 came out.....( sorry bout the pointless post....just wanted to post somethin....)
ohh I'm using FreeBSD and have nmap installed (3.27)....if I want to upgrade it do I have to first delete version 3.27??? or can I just install nmap and it will automatically update it self?? I dont know how it all works.....
I am using languard, it sounds good... I am also using NMAP but the windows version.. I understand that nmap on win has very limited options......
Also check this site for some free tools
http://www.nii.co.in/research/tools.html
kalp
"Whats the best port scanner out there? I want a good one so I can chck my home LAN for any valnurabilites."
Just to reiterate....
NMAP = Port Scanner = finds open ports, which is only one type of vulnerability (and only a "maybe" even then)
Nessus, Internet Scanner, Retina, Cerberus, Cybercop, Foundscan, Stat Scan, Leviathan, Pluto, et al are Vulnerability scanners, that is they find holes on your machine that could pose problems.
You mean there's other port scanners, other than NMAP?
Oh, FSCAN or Hping2... yea, that's it.
well on linux
NMAP,
NESSUS,
WHISKER
will do the trick
How about Retina ?
Compare with Nessus, i find Retina almost adequate.
hehe, this post seems to be overall full... however I'll have to say thanks for posing, and for creator of thread, helped me out, thanks
KK
Retina is a superior program to nessus, and with retina no other scanner is needed. In addition to all the functionality of nMap, Nessus, SAINT, Whisker, and SARA... retina also has CHAM, an AI hacking module and the only scanner to ever be responsible for the discovery of _new_ exploits (yes, retina has bugtraq submissions)Quote:
Originally posted here by yuna_admirer
How about Retina ?
Compare with Nessus, i find Retina almost adequate.
Yes, retina is expensive.
catch
Alot of attacks these days come over the Universal FireWall Bypass anyway. PORT 80. Every firewall has em open, so content or payload checking outweighs port scanning in my book, don't get me wrong I use nMap EVERYDAY. It rocks. And you have got to scan your ports for quickly locating the script kiddie baddies, I am not arguing that. Oh, I notice alot of people use XP, you have a local inside tool that is ESSENTIAL. "netstat" Be warned, you will be scared to death when you run it on a few user PCs. It will tell you what ports are open, where they are connected and get and ID reference to track it down. Got to give old M$ a hand for that one.
It's a command line tool
C:\netstat
This command give you the active process ID. A is for All and O is for Owner.
C:\netat -ao
I am new to this forum and it's HUGE, so I apologize to original posters if this command has been brought up before. It's not a port scanner but it will tell you exactly what ports are in use or listening.
Still,
Just try Retina, and ... you'll see.
The Bug database of Retina are updated almost daily, so instead of monitoring Security Focus, just performing a Bug scan everyday will keep you updated with newest bugs.
I use IP-Tools. It not only has port scaning but many other features as well. You can get it at Tucows.
I am looking at it, it's pretty cool but to be honest. I will have to find something extra special to warrant the 1000 dollar price tag. nMap is free...
Has anyone out there used it extensivly and can compare it to other tools?
nmap rulez!! i dont need to say anything else...
Yes , nmap is great seeing as though it uses tcp/ip fingerprinting querying the remote systems stack. But if your too lazy to use it through your shell , you can always use nmap fe , which is a gui extension of nmap . But i always prefer the command line.
www.insecure.org/nmap
goodluck !
I Think that Nmap is the best scanner it goes trogoh firewalls but IPcSCAN ALSO good