Alan's Blog

1
/usr/lib/nmap/nmap -sT -min-rates 10000 10.10.11.87 -Pn
2
...
3

4
PORT   STATE SERVICE
5
22/tcp open  ssh

1
/usr/lib/nmap/nmap -sU --top-ports 20 10.10.11.87
2
...
3

4
PORT      STATE         SERVICE
5
53/udp    open|filtered domain
6
67/udp    open|filtered dhcps
7
68/udp    open|filtered dhcpc
8
69/udp    open|filtered tftp
9
123/udp   open|filtered ntp
10
135/udp   closed        msrpc
11
137/udp   open|filtered netbios-ns
12
138/udp   open|filtered netbios-dgm
13
139/udp   open|filtered netbios-ssn
14
161/udp   open|filtered snmp
15
162/udp   open|filtered snmptrap
16
445/udp   open|filtered microsoft-ds
17
500/udp   open          isakmp
18
514/udp   open|filtered syslog
19
520/udp   closed        route
20
631/udp   closed        ipp
21
1434/udp  closed        ms-sql-m
22
1900/udp  closed        upnp
23
4500/udp  open|filtered nat-t-ike
24
49152/udp open|filtered unknown

1
ike-scan -A -M --pskcrack 10.10.11.87

1
psk-crack -d /usr/share/wordlists/rockyou.txt ./hash.txt