Med-Mastodon

0 posts0 participants0 posts today

Bellingcat# Фактчекинг легенды: Nmap и предполагаемый доступ к админке gov.kz ## Введение В IT-сообществе гуляет захватывающая история: якобы в 2021 году кто-то с помощью одной команды в Nmap случайно наткнулся на уязвимость сайта Министерства образования Казахстана (gov.kz) и получил доступ к админке без пароля! Такие байки — почти легенды для айтишников, особенно новичков, вдохновляя копаться в кибербезопасности. Но стоп: правда ли это? С точки зрения фактчекинга, история вызывает вопросы. Этот пост, основанный на OSINT-методологии (анализе открытых источников), разбирает инцидент по косточкам, отделяя факты от вымысла. Мы исследуем технические детали, контекст и уроки — всё в духе профессионального, но живого подхода, подходящего для Google Blogger! <a href="https://qoto.org/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSec</a> <a href="https://qoto.org/tags/OSINT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OSINT</a> <a href="https://qoto.org/tags/TechLegend" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechLegend</a> --- ## Ключевые слова - Nmap: Мощный инструмент для сканирования сети — ищет хосты, порты, уязвимости. <a href="https://qoto.org/tags/Nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nmap</a> - Gov.kz: Домен госресурсов Казахстана, включая сайт Минобразования. <a href="https://qoto.org/tags/GovTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GovTech</a> <a href="https://qoto.org/tags/Kazakhstan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Kazakhstan</a> - Кибербезопасность: Защита систем от атак и несанкционированного доступа. <a href="https://qoto.org/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSec</a> - Уязвимость: Слабое звено, открывающее дверь хакерам. - Админка: Панель управления сайтом — святая святых веб-ресурса. - Фактчекинг: Проверка историй на правду через открытые данные. <a href="https://qoto.org/tags/FactCheck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FactCheck</a> - OSINT: Разведка по открытым источникам — от СМИ до соцсетей. <a href="https://qoto.org/tags/OSINT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OSINT</a> - Халатность: Небрежность админов, из-за которой системы становятся уязвимы. - Информационная безопасность: Меры для защиты данных и серверов. <a href="https://qoto.org/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> - Легенда IT: Поучительные байки, мотивирующие IT-сообщество. <a href="https://qoto.org/tags/TechLegend" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechLegend</a> --- ## Целевая аудитория - Студенты и новички в IT Молодые айтишники, горящие желанием изучать кибербезопасность. Эта история может вдохновить, но вам нужен критический взгляд! <a href="https://qoto.org/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSec</a> - Исследователи кибербезопасности Профи, анализирующие уязвимости госсайтов и методы их обнаружения. <a href="https://qoto.org/tags/GovTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GovTech</a> - Специалисты по инфобезу Эксперты, которые борются с рисками и учатся на случаях халатности. <a href="https://qoto.org/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> - Журналисты и фактчекеры Медийщики, проверяющие IT-истории для точных и честных публикаций. <a href="https://qoto.org/tags/FactCheck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FactCheck</a> - Госструктуры Казахстана Ответственные за цифровую безопасность, чтобы извлечь уроки и закрыть бреши. <a href="https://qoto.org/tags/Kazakhstan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Kazakhstan</a> --- ## Факты под микроскопом 1. Нет следов инцидента в 2021 году Ни казахстанские СМИ, ни международные источники (Wired, ZDNet) не упоминают, чтобы через nmap <a href="http://gov.kz" rel="nofollow noopener noreferrer" target="_blank">http://gov.kz</a> кто-то ворвался в админку Минобразования. Такой громкий случай точно попал бы в новости или отчёты KZ-CERT. Где доказательства? <a href="https://qoto.org/tags/FactCheck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FactCheck</a> <a href="https://qoto.org/tags/Kazakhstan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Kazakhstan</a> 2. Синтаксис nmap — фейл Команда nmap <a href="http://gov.kz" rel="nofollow noopener noreferrer" target="_blank">http://gov.kz</a> — технический ляп. Nmap работает с доменами (nmap gov.kz) или IP, а не с URL. Это намёк: история писалась для вау-эффекта, а не для правды. <a href="https://qoto.org/tags/Nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nmap</a> <a href="https://qoto.org/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSec</a> 3. Админка без пароля? Сомнительно Да, халатность случается, но боевой сервер госструктуры на .gov.kz без авторизации — это редкость. Даже в странах с несовершенной кибергигиеной базовая защита обычно есть. <a href="https://qoto.org/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://qoto.org/tags/GovTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GovTech</a> 4. Реакция властей — нестыковка Исследователи порой находят баги и получают ответы или награды от госструктур Казахстана. Полное игнорирование доступа к базе данных? Звучит неправдоподобно. <a href="https://qoto.org/tags/Kazakhstan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Kazakhstan</a> <a href="https://qoto.org/tags/OSINT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OSINT</a> --- ## Вывод Скорее всего, это анекдотическая байка, созданная, чтобы зажечь интерес новичков к инфобезу. Такие легенды — вроде «взлома Пентагона через Excel» — популярны в IT, но факты тут шатки. Мораль хороша, а реальность под вопросом. <a href="https://qoto.org/tags/TechLegend" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechLegend</a> <a href="https://qoto.org/tags/FactCheck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FactCheck</a> --- ## Уроки на миллион - Халатность — частая причина дыр в безопасности. <a href="https://qoto.org/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> - Linux и nmap — мощные инструменты в умелых руках. <a href="https://qoto.org/tags/Nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nmap</a> <a href="https://qoto.org/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> - Факты проверяйте ссылками и данными, а не верьте на слово! <a href="https://qoto.org/tags/FactCheck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FactCheck</a> Хотите реальные кейсы уязвимостей госресурсов? Можем копнуть глубже! <a href="https://qoto.org/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSec</a> <a href="https://qoto.org/tags/OSINT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OSINT</a> --- ## Библиография и источники - Nmap Official Documentation <a href="https://nmap.org/book/" rel="nofollow noopener noreferrer" target="_blank">https://nmap.org/book/</a> Подтверждает: Nmap не дружит с http://, только домены и IP. <a href="https://qoto.org/tags/Nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nmap</a> - OWASP: Common Web Vulnerabilities <a href="https://owasp.org/www-project-top-ten/" rel="nofollow noopener noreferrer" target="_blank">https://owasp.org/www-project-top-ten/</a> Почему админка без пароля — серьёзный баг. <a href="https://qoto.org/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> - MITRE CVE Database <a href="https://cve.mitre.org/" rel="nofollow noopener noreferrer" target="_blank">https://cve.mitre.org/</a> База уязвимостей, включая госсектор. <a href="https://qoto.org/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSec</a> - Казахстанский CERT — KZ-CERT <a href="https://cert.gov.kz/" rel="nofollow noopener noreferrer" target="_blank">https://cert.gov.kz/</a> Новости и отчёты о киберинцидентах в Казахстане. <a href="https://qoto.org/tags/Kazakhstan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Kazakhstan</a> - Hacking News — Wired, ZDNet <a href="https://www.wired.com/tag/hacking/" rel="nofollow noopener noreferrer" target="_blank">https://www.wired.com/tag/hacking/</a> <a href="https://www.zdnet.com/topic/security/" rel="nofollow noopener noreferrer" target="_blank">https://www.zdnet.com/topic/security/</a> Реальные кейсы взломов. <a href="https://qoto.org/tags/Hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hacking</a> - Bug Bounty Platforms <a href="https://www.hackerone.com/" rel="nofollow noopener noreferrer" target="_blank">https://www.hackerone.com/</a> Примеры уязвимостей, найденных исследователями. <a href="https://qoto.org/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSec</a> - Книга: "The Art of Exploitation" — Jon Erickson Основа для изучения инструментов вроде Nmap. <a href="https://qoto.org/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>⁂௹∞°retroshare://channel?name=%D0%A4%D0%B0%D0%BA%D1%82%D1%87%D0%B5%D0%BA%D0%B8%D0%BD%D0%B3%20%D0%BB%D0%B5%D0%B3%D0%B5%D0%BD%D0%B4%D1%8B%3A%20Nmap%20%D0%B8%20%D0%BF%D1%80%D0%B5%D0%B4%D0%BF%D0%BE%D0%BB%D0%B0%D0%B3%D0%B0%D0%B5%D0%BC%D1%8B%D0%B9%20%D0%B4%D0%BE%D1%81%D1%82%D1%83%D0%BF%20%D0%BA%20%D0%B0%D0%B4%D0%BC%D0%B8%D0%BD%D0%BA%D0%B5%20gov.kz&id=63472370d4139ee7ad355edb74012351&msgid=3787fe92e95f60c2e6df08b32e8cac3fa24f4a41

ricardo :mastodon:24 <a href="https://fosstodon.org/tags/Nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nmap</a> Commands for Network Security and Scanning<a href="https://www.tecmint.com/nmap-command-examples/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.tecmint.com/nmap-command-examples/</a>

Ducky Fella<a href="https://cupoftea.social/tags/Fing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fing</a> used to be a decent app for doing quick network scans from a mobile device. I’ve watched them gradually enshittify over the past decade. They are now charging £7.99 a month for what is essentially just <a href="https://cupoftea.social/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a>. Disappointing but not surprising anymore.

Cyberkid🛡️ Nmap, Metasploit, Hydra, Mimikatz, Netcat: Overview & Uses 🔍<a href="https://defcon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> 🛡️ <a href="https://defcon.social/tags/PenTesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PenTesting</a> 🎯 <a href="https://defcon.social/tags/EthicalHacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EthicalHacking</a> 💻 <a href="https://defcon.social/tags/Nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nmap</a> 🔍 <a href="https://defcon.social/tags/Metasploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Metasploit</a> <a href="https://defcon.social/tags/Hydra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hydra</a> 🔑 <a href="https://defcon.social/tags/Netcat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Netcat</a> 🌐

utzer [Pleroma]Mag mir jemand helfen eine <a class="hashtag" href="https://soc.utzer.de/tag/sip" rel="nofollow noopener noreferrer" target="_blank">#SIP</a> Problem mit <a class="hashtag" href="https://soc.utzer.de/tag/fonial" rel="nofollow noopener noreferrer" target="_blank">#Fonial</a> im <a class="hashtag" href="https://soc.utzer.de/tag/mobilfunknetz" rel="nofollow noopener noreferrer" target="_blank">#Mobilfunknetz</a> der Deutschen <a class="hashtag" href="https://soc.utzer.de/tag/telekom" rel="nofollow noopener noreferrer" target="_blank">#Telekom</a> zu diagnostizieren. Es deutet vieles auf ein Problem im Netz der Telekom hin und die Telekom sagt natürlich "das kann nicht sein". Das Problem tritt bei zwei APNs auf, bei einem dritten nicht, alles öffentliche APNs der Telekom. Was ich brauche ist das generelle Verständnis des SIP Verbindungsaufbau, damit ich mit <a class="hashtag" href="https://soc.utzer.de/tag/nmap" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> (oder so) mal nachvollziehen kann was da passiert, ich kann auch einen SIP Client auf Linux installieren und <a class="hashtag" href="https://soc.utzer.de/tag/wireshark" rel="nofollow noopener noreferrer" target="_blank">#Wireshark</a> mitlaufen lassen. Also wenn jemand was beisteuern kann ich würde mich freuen.

Jan ☕🎼🎹☁️🏋️‍♂️Whoo, submitted my first <a href="https://fedi.kcore.org/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> <a href="https://fedi.kcore.org/tags/fingerprint" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fingerprint</a> ;)

nickbeardedIt’s 1 AM—what better time to test the new BashCore update? 😏🔥🔹 Lightweight, fast, and minimal. 🔹 Even more stable and optimized. 🔹 Now with GPM for mouse support in the console! 🖱️ 🔹 Coming very soon!Meanwhile, a little totally legal test on scanme.nmap.org… why not? 🤣<a href="https://mastodon.social/tags/BashCore" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BashCore</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/Pentesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pentesting</a> <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://mastodon.social/tags/EthicalHacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EthicalHacking</a> <a href="https://mastodon.social/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a>

OSTechNixHow To Check And Secure Open Ports In Linux <a href="https://floss.social/tags/Linuxnetworking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linuxnetworking</a> <a href="https://floss.social/tags/Linuxsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linuxsecurity</a> <a href="https://floss.social/tags/Linuxadmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linuxadmin</a> <a href="https://floss.social/tags/Linuxhowto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linuxhowto</a> <a href="https://floss.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> <a href="https://floss.social/tags/netstat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#netstat</a> <a href="https://floss.social/tags/ss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ss</a> <a href="https://floss.social/tags/firewalld" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#firewalld</a> <a href="https://floss.social/tags/iptables" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iptables</a> <a href="https://floss.social/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> <a href="https://floss.social/tags/lsof" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lsof</a> <a href="https://ostechnix.com/check-and-secure-open-ports-in-linux/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ostechnix.com/check-and-secure-open-ports-in-linux/</a>

CX-7🔍 What is Nmap? Nmap (Network Mapper) is an open-source tool for scanning networks, finding devices, detecting open ports, and identifying services & vulnerabilities.🚀 Why use Nmap? ✅ Maps networks & finds active devices ✅ Detects open ports & running services ✅ Identifies OS & app versions ✅ Helps in security audits & pentesting ✅ Supports automation via Nmap Scripting Engine💻 Bonus: It even has a GUI version called Zenmap!<a href="https://mastodon.social/tags/Nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nmap</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/Hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hacking</a> <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a>

jhxNew video out 👍 Building and patching vsftpd on <a href="https://fosstodon.org/tags/Debian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Debian</a> :debian: We are altering the reported version number of vsftpd and generate a .deb package along the way for easy installation. 😎 Enjoy everyone! 🙂 Youtube: <a href="https://www.youtube.com/watch?v=XbEIrl6VZSw" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.youtube.com/watch?v=XbEIrl6VZSw</a>Odysee: <a href="https://odysee.com/@YetanotherSysAdmin:0/Compiling-and-patching-vsftpd-on-Debian:9" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://odysee.com/@YetanotherSysAdmin:0/Compiling-and-patching-vsftpd-on-Debian:9</a><a href="https://fosstodon.org/tags/youtube" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#youtube</a> <a href="https://fosstodon.org/tags/debian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#debian</a> <a href="https://fosstodon.org/tags/package" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#package</a> <a href="https://fosstodon.org/tags/compiling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compiling</a> <a href="https://fosstodon.org/tags/source" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#source</a> <a href="https://fosstodon.org/tags/vsftpd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vsftpd</a> <a href="https://fosstodon.org/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a>

Alexandre DulaunoyNew nmap nse script for vulnerability-lookup<a href="https://github.com/nmap/nmap/pull/2995" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/nmap/nmap/pull/2995</a><a href="https://infosec.exchange/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://infosec.exchange/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> <a href="https://infosec.exchange/tags/network" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#network</a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a> <a href="https://infosec.exchange/tags/cti" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cti</a>

Odot of RVATool 1: Nmap (Network Mapper)<a href="https://nmap.org/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nmap.org/</a><a href="https://mastodon.social/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> <a href="https://mastodon.social/tags/ethicalhacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ethicalhacking</a> <a href="https://mastodon.social/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a>

Kevin Karhan :verified:<a href="https://paquita.masto.host/@microblogc" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@microblogc</a> <a href="https://mastodon.social/@nixCraft" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@nixCraft</a> nowadays you just use <a href="https://infosec.space/tags/Shodan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shodan</a> for that...<ul><li>Or just <a href="https://infosec.space/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> the shit out of your network...</li></ul>

halil denizI just published Nmap: A Tool for Network Discovery and Security Auditing <a href="https://link.medium.com/bnXyDvD3pOb" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://link.medium.com/bnXyDvD3pOb</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/tags/ethicalhacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ethicalhacking</a> <a href="https://mastodon.social/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> <a href="https://mastodon.social/tags/networksecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networksecurity</a> <a href="https://mastodon.social/tags/pentesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentesting</a>

🦠Toxic Flange (Gurjeet)🔬⚱️🌚Well that was a bit of exercise of developing a crappy <a href="https://infosec.exchange/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> script. Still I've learned lots about <a href="https://infosec.exchange/tags/Lua" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Lua</a> scripting and i could enjoy just doing this for fun. Its wholly unpractical but serves as a good learning platform. <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

OdotNew Blog on Nmap:<a href="https://www.buymeacoffee.com/odotthecreative/map-that-network-nmap-2983619" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.buymeacoffee.com/odotthecreative/map-that-network-nmap-2983619</a>Hope it helps<a href="https://mastodon.social/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> <a href="https://mastodon.social/tags/cybersec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersec</a> <a href="https://mastodon.social/tags/networkmapping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networkmapping</a> #

OdotWorking on some Nmap scans via Termux. Quite interesting what you can do from the smartphone.Scanme.nmap.org is the site in scanning by the way. Lol. Open season! Lol. Practice makes perfect over time. <a href="https://mastodon.social/tags/ethicalhacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ethicalhacking</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a>

🦠Toxic Flange (Gurjeet)🔬⚱️🌚Also if you think about it, the majority of <a href="https://infosec.exchange/tags/tenable" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tenable</a> <a href="https://infosec.exchange/tags/nessus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nessus</a> functionality is based on its ability to log into a remote machine, use the tools on that host (windows: regsitry calls, execute cmd.exe scripts or posh, unix: ssh in run commands built into the host to retrive whatever info it has), and then generate a report. <a href="https://infosec.exchange/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> has the modules <code>libssh2-utility</code> to log you in (check out <code>ssh-run.nse</code>) and smb capabilities (<code>smb-psexec.nse</code>) that allow you to run services commands and the like on Windows. Why are people paying thousands in subscription fees ???! <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> c

🦠Toxic Flange (Gurjeet)🔬⚱️🌚You know I never really took a close look at all the capabilities of <a href="https://infosec.exchange/tags/NMAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NMAP</a> 's scripting ability til recently and there's enough here to do all the functions of <a href="https://infosec.exchange/tags/tenable" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tenable</a> <a href="https://infosec.exchange/tags/nessus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nessus</a> core. Some creative modules and one could easily duplicate the cli functionality. <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

n0kovo 🇩🇰:anarchy::comm::terminal::vegan::debian::python::tor::signal:<a href="https://infosec.exchange/tags/nmap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nmap</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#redteam</a> <a href="https://infosec.exchange/tags/blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blueteam</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hacking</a>

Recent searches

Search options

Administered by:

Server stats:

#nmap