 |
| ||
| |||||||
 |
| | LinkBack | Thread Tools |
03-21-2008
| ||||
| ||||
 ۞ IP Address - Network Address - All kind of Information on IP | T2T | ~SS~ | ~TLrG~ How do I find my own IP ?- Find urself Windows 9X/Me: Use the "winipcfg" command, this will bring up a GUI dialog with all the info you will need.Windows NT/2000/XP/etc: Use the "ipconfig command. C:\>ipconfig /allNotice that this gives you allsorts of networking information, including your IP, Gateway, MAC Address, DNS server and Host Name. Linux/Unix: Use the "ifconfig" command to find the IP of the box.All OSes: The IP found using the instructions above is the IP your computers NIC (Network Interface Card) or modem has, if you are hooked to a home router or some other kind of NAT box the IP the world sees as you when you connect to other hosts will be different. To find you WAN IP (the IP the world sees when you are behind a NAT box or a Proxy)bash-2.04$ /sbin/ifconfigIf you are SSH/telneting to the box and you want to find the IP you are attaching from use the "finger" command with no parameters. ================ Enjoy ~SiLvEr SuRfEr~ ~••TLrG••~ Press The Thanx
__________________ EBOOKS COLLECTION: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. IMAGES COLLECTION: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. Last edited by ~SiLvEr SuRfEr~; 03-21-2008 at 05:38 PM.  |
|
03-21-2008
| ||||
| ||||
 ۞ How do I find out if an IP is contactable - Find urself | ~SS~ | ~TLrG~ How do I find out if an IP is contactable? If the host is not blocking ICMP echo requests (type 8, code 0) try using the "ping" command, it should work from any Unix like OS and from Windows. UP: C:\>ping 192.168.1.3 Pinging 192.168.1.3 with 32 bytes of data: Reply from 192.168.1.3: bytes=32 time<10ms TTL=255 Reply from 192.168.1.3: bytes=32 time<10ms TTL=255 Reply from 192.168.1.3: bytes=32 time<10ms TTL=255 Reply from 192.168.1.3: bytes=32 time<10ms TTL=255 Ping statistics for 192.168.1.3: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms C:\> Not Up C:\>ping 192.168.30.133 Pinging 192.168.30.133 with 32 bytes of data: Request timed out. Request timed out. Request timed out. Request timed out. Ping statistics for 192.168.30.133: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms C:\> If the host is behind a firewall blocking ICMP echo requests then you will have to look into other ways of enumerating the network, like Hping
__________________ EBOOKS COLLECTION: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. IMAGES COLLECTION: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. |
|
03-24-2008
| ||||
| ||||
| Re: ۞ IP Address - Network Address - All kind of Information on IP | T2T | ~SS~ | ~TLrG~ How do I find out what OS a box is running? You can tell what OS a box is running in a few ways. Knowing what ports are open on the box will give you some good guesses (for instance port 6000 is used for X-windows, it being open probably means the box is running some kind of Unix). The easiest way to find this info is to use the "nmap" utility from Nmap - Free Security Scanner For Network Exploration & Security Audits. ( also available on the Knoppix Linux Boot CD ( KNOPPIX Linux Live CD ) or Trinux boot disk ( SourceForge.net: Trinux: A Linux Security Toolkit ) ) and do an OS fingerprint like so: [root@tux adrian]# nmap -O tux.mydomains.com Starting nmap V. 2.54BETA26 ( Nmap - Free Security Scanner For Network Exploration & Security Audits. ) Adding open port 22/tcp Adding open port 1024/tcp Adding open port 25/tcp Adding open port 80/tcp Adding open port 110/tcp Adding open port 993/tcp Adding open port 6002/tcp Adding open port 5902/tcp Adding open port 111/tcp Adding open port 443/tcp Adding open port 21/tcp Adding open port 995/tcp Adding open port 23/tcp Adding open port 143/tcp Adding open port 139/tcp Adding open port 515/tcp Interesting ports on tux.mydomains.com (192.168.1.3): (The 1532 ports scanned but not shown below are in state: closed) Port State Service 21/tcp open ftp 22/tcp open ssh 23/tcp open telnet 25/tcp open smtp 80/tcp open http 110/tcp open pop-3 111/tcp open sunrpc 139/tcp open netbios-ssn 143/tcp open imap2 443/tcp open https 515/tcp open printer 993/tcp open imaps 995/tcp open pop3s 1024/tcp open kdm 5902/tcp open vnc-2 6002/tcp open X11:2 Remote operating system guess: Linux Kernel 2.4.0 - 2.4.5 (X86) Uptime 9.033 days (since Fri Jan 25 14:55:20 2002) Nmap run completed -- 1 IP address (1 host up) scanned in 2 seconds [root@tux adrian]# Notice the part in red indicate the likely OS. Be careful about using tools like "nmap", the site you are targeting may give your local admin a call asking why you are scanning their site. Also make sure your copy of Nmap is up to date so it has the newest OS fingerprints, the version I used in the above example is kind of old. You can also find out sometimes by using the "What's that site running" cgi at Netcraft, which does a banner grab for you. Telneting to the host and observing the intro may give you some info: Red Hat Linux release 7.1 (Seawolf) Kernel 2.4.2-2 on an i686 login: and if they only have port 80 open you can telnet to that port and hit enter twice and observe the headers: [root@tux adrian]# telnet orangutan.mydomains.com 80 Trying 192.168.28.32... Connected to orangutan.mydomains.com. Escape character is '^]'. HTTP/1.1 400 Bad Request Server: Microsoft-IIS/5.0 Date: Sun, 03 Feb 2002 20:51:47 GMT Content-Type: text/html Content-Length: 87 <html><head><title>Error</title></head><body>The parameter is incorrect. </body> </html>Connection closed by foreign host. [root@tux adrian]# This technique is know as "banner grabbing".
__________________ EBOOKS COLLECTION: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. IMAGES COLLECTION: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. Last edited by ~SiLvEr SuRfEr~; 03-24-2008 at 02:37 AM. |
|
03-24-2008
| ||||
| ||||
| Re: ۞ IP Address - Network Address - All kind of Information on IP | T2T | ~SS~ | ~TLrG~ How do I find out what ports are open/services are running? There are port scanners for Windows and Unix, "nmap" ( Nmap - Free Security Scanner For Network Exploration & Security Audits. and available on the Trinux boot disk) being my personal choice. Be careful about using tools like "nmap", the site you are targeting may give your local admin a call asking why you are scanning their site. See the above entry for an example of using nmap. If you want to find out what ports are open on your local Windows box use the "netstat" command. Windows: C:\>netstat Active Connections Proto Local Address Foreign Address State TCP testbox1:1370 cser-fs01.mydomains.com:netbios-ssn ESTABLISHED TCP testbox1:1469 ntemail1-tr.mydomains.state.com:1078 ESTABLISHED TCP testbox1:1473 ntemail1-tr.mydomains.state.com:1091 ESTABLISHED TCP testbox1:1495 ntemail1-tr.mydomains.state.com:1078 ESTABLISHED TCP testbox1:1499 ntemail1-tr.mydomains.state.com:1091 ESTABLISHED TCP testbox1:1631 tux.mydomains.com:telnet ESTABLISHED TCP testbox1:1690 bl-uits-myadsdc01.myads.mydomain.com:microsoft-ds TIME_WA IT TCP testbox1:1692 cser-app1.mydomains.com:microsoft-ds ESTABLISHED TCP testbox1:1694 bl-uits-myadsdc01.myads.mydomain.com:microsoft-ds TIME_WA IT TCP testbox1:1699 homepages1.mydomains.com:netbios-ssn TIME_WAIT C:\> For better information, like what binary has a post open use a tool like Fport ( Foundstone - A division of McAfee ): C:\>fport FPort v2.0 - TCP/IP Process to Port Mapper Copyright 2000 by Foundstone, Inc. Foundstone - A division of McAfee Pid Process Port Proto Path 1572 inetinfo -> 25 TCP C:\WINDOWS\System32\inetsrv\inetinfo.exe 1572 inetinfo -> 80 TCP C:\WINDOWS\System32\inetsrv\inetinfo.exe 1008 svchost -> 135 TCP C:\WINDOWS\system32\svchost.exe 4 System -> 139 TCP 1572 inetinfo -> 443 TCP C:\WINDOWS\System32\inetsrv\inetinfo.exe 4 System -> 445 TCP 1108 svchost -> 1025 TCP C:\WINDOWS\System32\svchost.exe 1572 inetinfo -> 1043 TCP C:\WINDOWS\System32\inetsrv\inetinfo.exe 776 winlogon -> 1056 TCP \??\C:\WINDOWS\system32\winlogon.exe 4 System -> 1135 TCP 2436 OUTLOOK -> 1162 TCP C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System -> 1169 TCP 2436 OUTLOOK -> 1176 TCP C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 1232 firefox -> 1219 TCP C:\Program Files\Mozilla Firefox\firefox.exe 1232 firefox -> 1220 TCP C:\Program Files\Mozilla Firefox\firefox.exe 2436 OUTLOOK -> 1221 TCP C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System -> 1390 TCP 4 System -> 1451 TCP 4 System -> 1456 TCP 1232 firefox -> 1602 TCP C:\Program Files\Mozilla Firefox\firefox.exe 4 System -> 1634 TCP 0 System -> 1635 TCP 1108 svchost -> 3389 TCP C:\WINDOWS\System32\svchost.exe 1296 -> 5000 TCP 264 WCESCOMM -> 5679 TCP C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE 1572 inetinfo -> 135 UDP C:\WINDOWS\System32\inetsrv\inetinfo.exe 2436 OUTLOOK -> 137 UDP C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System -> 138 UDP 1572 inetinfo -> 445 UDP C:\WINDOWS\System32\inetsrv\inetinfo.exe 1008 svchost -> 500 UDP C:\WINDOWS\system32\svchost.exe 1572 inetinfo -> 1026 UDP C:\WINDOWS\System32\inetsrv\inetinfo.exe 4 System -> 1027 UDP 1108 svchost -> 1028 UDP C:\WINDOWS\System32\svchost.exe 1572 inetinfo -> 1049 UDP C:\WINDOWS\System32\inetsrv\inetinfo.exe 776 winlogon -> 1051 UDP \??\C:\WINDOWS\system32\winlogon.exe 4 System -> 1165 UDP 2436 OUTLOOK -> 1558 UDP C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System -> 1900 UDP 1232 firefox -> 1900 UDP C:\Program Files\Mozilla Firefox\firefox.exe 2436 OUTLOOK -> 2967 UDP C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System -> 3456 UDP C:\> Or Netport: C:\>netport NetPort v1.1 - A Visual Log Product Copyright 2004 by Softgears Company SoftGears Freeware and Shareware Pid Process Port Proto Foreign Address Path 1572 inetinfo 25 TCP: LISTENING C:\WINDOWS\System32\inetsrv\inetinfo.exe 1572 inetinfo 80 TCP: LISTENING C:\WINDOWS\System32\inetsrv\inetinfo.exe 1008 svchost 135 TCP: LISTENING C:\WINDOWS\system32\svchost.exe 1572 inetinfo 443 TCP: LISTENING C:\WINDOWS\System32\inetsrv\inetinfo.exe 4 System 445 TCP: LISTENING 1108 svchost 1025 TCP: LISTENING C:\WINDOWS\System32\svchost.exe 1572 inetinfo 1043 TCP: LISTENING C:\WINDOWS\System32\inetsrv\inetinfo.exe 776 winlogon 1056 TCP: LISTENING \??\C:\WINDOWS\system32\winlogon.exe 4 System 1135 TCP: LISTENING 2436 OUTLOOK 1162 TCP: LISTENING C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System 1169 TCP: LISTENING 2436 OUTLOOK 1176 TCP: LISTENING C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 1232 firefox 1220 TCP: LISTENING C:\Program Files\Mozilla Firefox\firefox.exe 2436 OUTLOOK 1221 TCP: LISTENING C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System 1451 TCP: LISTENING 4 System 1456 TCP: LISTENING 1232 firefox 1602 TCP: LISTENING C:\Program Files\Mozilla Firefox\firefox.exe 1108 svchost 3389 TCP: LISTENING C:\WINDOWS\System32\svchost.exe 1296 System 5000 TCP: LISTENING 264 WCESCOMM 5679 TCP: LISTENING C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE 1232 firefox 1219 TCP: LISTENING C:\Program Files\Mozilla Firefox\firefox.exe 1232 firefox 1219 TCP: ESTABLISHED 127.0.0.1:1220 C:\Program Files\Mozilla Firefox\firefox.exe 1232 firefox 1220 TCP: ESTABLISHED 127.0.0.1:1219 C:\Program Files\Mozilla Firefox\firefox.exe 4 System 139 TCP: LISTENING 776 winlogon 1056 TCP: CLOSE_WAIT 134.68.220.157:389 \??\C:\WINDOWS\system32\winlogon.exe 2436 OUTLOOK 1162 TCP: ESTABLISHED 134.68.220.155:1025 C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System 1169 TCP: ESTABLISHED 192.168.28.33:445 2436 OUTLOOK 1176 TCP: ESTABLISHED 129.79.1.40:1222 C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 2436 OUTLOOK 1221 TCP: ESTABLISHED 129.79.1.214:1249 C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 4 System 1390 TCP: LISTENING 4 System 1390 TCP: ESTABLISHED 192.168.30.154:139 4 System 1456 TCP: ESTABLISHED 129.79.6.3:445 1232 firefox 1602 TCP: ESTABLISHED 64.233.167.104:80 C:\Program Files\Mozilla Firefox\firefox.exe 4 System 1634 TCP: LISTENING 4 System 1634 TCP: ESTABLISHED 192.168.30.34:139 1008 svchost 135 UDP: LISTENING C:\WINDOWS\system32\svchost.exe 4 System 445 UDP: LISTENING 836 lsass 500 UDP: LISTENING C:\WINDOWS\system32\lsass.exe 1264 System 1026 UDP: LISTENING 1264 System 1027 UDP: LISTENING 836 lsass 1028 UDP: LISTENING C:\WINDOWS\system32\lsass.exe 1572 inetinfo 1049 UDP: LISTENING C:\WINDOWS\System32\inetsrv\inetinfo.exe 776 winlogon 1051 UDP: LISTENING \??\C:\WINDOWS\system32\winlogon.exe 2436 OUTLOOK 1165 UDP: LISTENING C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 1640 Rtvscan 2967 UDP: LISTENING C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe 1572 inetinfo 3456 UDP: LISTENING C:\WINDOWS\System32\inetsrv\inetinfo.exe 4064 FRONTPG 1558 UDP: LISTENING C:\PROGRA~1\MICROS~2\Office10\FRONTPG.EXE 1296 System 1900 UDP: LISTENING 4 System 137 UDP: LISTENING 4 System 138 UDP: LISTENING 1296 System 1900 UDP: LISTENING C:\> Linux/*nix: Use the "lsof -i" command: [root@balrog root]# lsof -i COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME dhclient 467 root 4u IPv4 777 UDP *:bootpc portmap 533 rpc 3u IPv4 898 UDP *  unrpcportmap 533 rpc 4u IPv4 901 TCP * unrpc (LISTEN)rpc.statd 552 rpcuser 4u IPv4 972 UDP *:32768 rpc.statd 552 rpcuser 5u IPv4 939 UDP *:728 rpc.statd 552 rpcuser 6u IPv4 975 TCP *:32768 (LISTEN) sshd 642 root 3u IPv4 1287 TCP * sh (LISTEN)xinetd 657 root 5u IPv4 1313 TCP localhost.localdomain:32769 (LISTEN) sendmail 682 root 4u IPv4 1377 TCP localhost.localdomain mtp (LISTEN)httpd 712 root 3u IPv4 1422 TCP *:http (LISTEN) httpd 712 root 4u IPv4 1423 TCP *:https (LISTEN) sshd 8498 root 4u IPv4 323188 TCP balrog.ius.com sh->winxpe:1644 (ESTABLISHED)httpd 31094 apache 3u IPv4 1422 TCP *:http (LISTEN) httpd 31094 apache 4u IPv4 1423 TCP *:https (LISTEN) httpd 31095 apache 3u IPv4 1422 TCP *:http (LISTEN) httpd 31095 apache 4u IPv4 1423 TCP *:https (LISTEN) httpd 31096 apache 3u IPv4 1422 TCP *:http (LISTEN) httpd 31096 apache 4u IPv4 1423 TCP *:https (LISTEN) httpd 31097 apache 3u IPv4 1422 TCP *:http (LISTEN) httpd 31097 apache 4u IPv4 1423 TCP *:https (LISTEN) httpd 31098 apache 3u IPv4 1422 TCP *:http (LISTEN) httpd 31098 apache 4u IPv4 1423 TCP *:https (LISTEN) httpd 31099 apache 3u IPv4 1422 TCP *:http (LISTEN) httpd 31099 apache 4u IPv4 1423 TCP *:https (LISTEN) httpd 31100 apache 3u IPv4 1422 TCP *:http (LISTEN) httpd 31100 apache 4u IPv4 1423 TCP *:https (LISTEN) httpd 31101 apache 3u IPv4 1422 TCP *:http (LISTEN) httpd 31101 apache 4u IPv4 1423 TCP *:https (LISTEN) [root@balrog root]#
__________________ EBOOKS COLLECTION: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. IMAGES COLLECTION: To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. | To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. Last edited by ~SiLvEr SuRfEr~; 03-24-2008 at 02:40 AM. |
|
| Thread Tools | |
|
|
Re: ۞ IP Address - Network Address - All kind of Information on IP | T2T | ~SS~ | ~TLrG~ 
