nmap random source IP spoofing script - Revision history

Nighthawk at 01:39, 9 May 2013

2013-05-09T01:39:41Z

Nighthawk at 01:31, 9 May 2013

2013-05-09T01:31:16Z

Nighthawk at 01:30, 9 May 2013

2013-05-09T01:30:48Z

Nighthawk at 01:29, 9 May 2013

2013-05-09T01:29:22Z

Nighthawk at 01:00, 9 May 2013

2013-05-09T01:00:29Z

Nighthawk at 00:59, 9 May 2013

2013-05-09T00:59:41Z

Nighthawk: Created page with " #!/bin/bash
LIMIT=$1 DSTIP=$2
for i in `seq $LIMIT` do echo "limit = $LIMIT" RNDPORT=`echo $((RANDOM%=65535))` SOURCEIP=`echo $((RANDOM%=223))"."$((RA..."

2013-05-09T00:59:29Z

Created page with " #!/bin/bash <br>LIMIT=$1 DSTIP=$2<br> for i in `seq $LIMIT` do echo "limit = $LIMIT" RNDPORT=`echo $((RANDOM%=65535))` SOURCEIP=`echo $((RANDOM%=223))"."$((RA..."

New page

#!/bin/bash
<br>LIMIT=$1
DSTIP=$2<br>
for i in `seq $LIMIT`
do
echo "limit = $LIMIT"
RNDPORT=`echo $((RANDOM%=65535))`
SOURCEIP=`echo $((RANDOM%=223))"."$((RANDOM%=255))"."$((RANDOM%=255))"."$((RANDOM%=254))`
echo "running nmap with spoofed source IP $SOURCEIP"
nmap -n --max-retries 1 --host-timeout 1 -e eth1 -sS -S $SOURCEIP $DSTIP -Pn -p 80
nmap -n --max-retries 1 --host-timeout 1 -e eth1 -sS -S $SOURCEIP $DSTIP -Pn -p $RNDPORT
done

[[category:nmap]]

← Older revision		Revision as of 01:39, 9 May 2013
Line 1:		Line 1:
−	This script was used to generate firewall logs and represent a wide array of incoming traffic. The "-sS" only sends a syn packet, it doesn't try to complete a handshake. Without it, nmap might try to bind to a socket, which will fail because the source IPs it is trying to bind with are faked.	+	This script was used to generate firewall logs and represent a wide array of incoming traffic. It chooses a random source IP to spoof and a random service port. The "-sS" only sends a syn packet, it doesn't try to complete a handshake. Without it, nmap might try to bind to a socket, which will fail because the source IPs it is trying to bind with are faked.

	'''Usage: nmaspoof limit destination'''<br>		'''Usage: nmaspoof limit destination'''<br>

@@ Line 3: / Line 3: @@
 '''Usage: nmaspoof limit destination'''<br>
 where nmaspoof is the name of the script below<br>
-      limit is the number of packets / loops of the script you desire<br>
+limit is the number of packets / loops of the script you desire<br>
-      destination is the hostname or IP
+destination is the hostname or IP to target
 '''the script...'''

@@ Line 1: / Line 1: @@
 This script was used to generate firewall logs and represent a wide array of incoming traffic.  The "-sS" only sends a syn packet, it doesn't try to complete a handshake.  Without it, nmap might try to bind to a socket, which will fail because the source IPs it is trying to bind with are faked.
-'''Usage: nmaspoof limit destination'''
+'''Usage: nmaspoof limit destination'''<br>
-where nmaspoof is the name of the script below
+where nmaspoof is the name of the script below<br>
-       limit is the number of packets / loops of the script you desire
+       limit is the number of packets / loops of the script you desire<br>
        destination is the hostname or IP

@@ Line 1: / Line 1: @@
+This script was used to generate firewall logs and represent a wide array of incoming traffic.  The "-sS" only sends a syn packet, it doesn't try to complete a handshake.  Without it, nmap might try to bind to a socket, which will fail because the source IPs it is trying to bind with are faked.
   #!/bin/bash
   <br>LIMIT=$1
@@ Line 12: / Line 18: @@
     nmap -n --max-retries 1 --host-timeout 1 -e eth1 -sS -S $SOURCEIP $DSTIP -Pn -p $RNDPORT
   done
 [[category:nmap]]

@@ Line 10: / Line 10: @@
     SOURCEIP=`echo $((RANDOM%=223))"."$((RANDOM%=255))"."$((RANDOM%=255))"."$((RANDOM%=254))`
     echo "running nmap with spoofed source IP $SOURCEIP"
     nmap -n --max-retries 1 --host-timeout 1 -e eth1 -sS -S $SOURCEIP $DSTIP -Pn -p $RNDPORT
   done
 [[category:nmap]]