{"action":"created","issue":{"url":"https://api.github.com/repos/alexanderhawl/penetrationtest/issues/8","repository_url":"https://api.github.com/repos/alexanderhawl/penetrationtest","labels_url":"https://api.github.com/repos/alexanderhawl/penetrationtest/issues/8/labels{/name}","comments_url":"https://api.github.com/repos/alexanderhawl/penetrationtest/issues/8/comments","events_url":"https://api.github.com/repos/alexanderhawl/penetrationtest/issues/8/events","html_url":"https://github.com/alexanderhawl/penetrationtest/issues/8","id":233412258,"number":8,"title":"scanning ","user":{"login":"alexanderhawl","id":22365038,"avatar_url":"https://avatars3.githubusercontent.com/u/22365038?v=3","gravatar_id":"","url":"https://api.github.com/users/alexanderhawl","html_url":"https://github.com/alexanderhawl","followers_url":"https://api.github.com/users/alexanderhawl/followers","following_url":"https://api.github.com/users/alexanderhawl/following{/other_user}","gists_url":"https://api.github.com/users/alexanderhawl/gists{/gist_id}","starred_url":"https://api.github.com/users/alexanderhawl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alexanderhawl/subscriptions","organizations_url":"https://api.github.com/users/alexanderhawl/orgs","repos_url":"https://api.github.com/users/alexanderhawl/repos","events_url":"https://api.github.com/users/alexanderhawl/events{/privacy}","received_events_url":"https://api.github.com/users/alexanderhawl/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-06-04T05:12:35Z","updated_at":"2017-06-04T05:20:31Z","closed_at":null,"body":"this stage includes :port scanning;operating system fingerprint;web server version information;underlying infrastructure analysis;application identification.\r\nuse Nmap to scan.-sT will perform a three-way TCP handshake(syn--syn/ack--ack),it provides a more accurate state of the port, but it is more likely to be logged at the target machine. -sS , known as the SYN scan ,which does not complete the handshake, therefore it is not logged . but the packet generated by the SYN scan can alert firewall and IPS devices. -F , Nmap scans the top 100 ports, --top-ports N scan for N most popular ports, -p define a port,port list,or a port range for Nmap to scan.In usual, Nmap will scan top 1000 frequently used ports that are specified in the nmap-services. there are 65535 tcp and udp ports, you can use -p 1-65535 .(wanna watch the packet, add -packet-trace"},"comment":{"url":"https://api.github.com/repos/alexanderhawl/penetrationtest/issues/comments/306019097","html_url":"https://github.com/alexanderhawl/penetrationtest/issues/8#issuecomment-306019097","issue_url":"https://api.github.com/repos/alexanderhawl/penetrationtest/issues/8","id":306019097,"user":{"login":"alexanderhawl","id":22365038,"avatar_url":"https://avatars3.githubusercontent.com/u/22365038?v=3","gravatar_id":"","url":"https://api.github.com/users/alexanderhawl","html_url":"https://github.com/alexanderhawl","followers_url":"https://api.github.com/users/alexanderhawl/followers","following_url":"https://api.github.com/users/alexanderhawl/following{/other_user}","gists_url":"https://api.github.com/users/alexanderhawl/gists{/gist_id}","starred_url":"https://api.github.com/users/alexanderhawl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alexanderhawl/subscriptions","organizations_url":"https://api.github.com/users/alexanderhawl/orgs","repos_url":"https://api.github.com/users/alexanderhawl/repos","events_url":"https://api.github.com/users/alexanderhawl/events{/privacy}","received_events_url":"https://api.github.com/users/alexanderhawl/received_events","type":"User","site_admin":false},"created_at":"2017-06-04T05:20:31Z","updated_at":"2017-06-04T05:20:31Z","body":"evade firewalls and IPS using Nmap\r\n1.ACK scan, some routers only allow SYN packets from internal network, -sA option ,Nmap generates the packet with only the ACK bit.although the ACK scan cannot reliably tell whether a port at the end system is open or closed, but it can be used to identify online system behind the router.\r\n2.fixed a port, --source-port , because some firewall administrator configure firewall with rules allowing incoming traffic from the external network that originate from a specific source port ,such as 53(DNS),25(SMTP),80(WWW).Nmap by default randomly selects a source port."}}
{"actor":{"display_login":"alexanderhawl"}}