Тест на скорость трех сканеров портов

Discussion in 'Безопасность и Анонимность' started by Tmye, 24 Nov 2015.

  1. Tmye

    Tmye Member

    Joined:
    24 Nov 2015
    Messages:
    17
    Likes Received:
    6
    Reputations:
    1
    Протестировал три сканнера портов: Nmap 7.00, RealVNC 4.1.1 Bypass Authentication Scanner и Masscan. Сканировался один диапазон 5.2.128.0/19 из Румынии Румынию. Канал: скачивание 69, отдача 92 Мбит/с по версии speedtest. Microsoft Windows Server 2003.

    Параметры командной строки nmap -n -PN -p3389 5.2.128.0/19 -T5 --open -oX myscan.xml. Результат: за 00:32 сек. 312 IP.

    Параметры командной строки RealVNC 4.1.1 Bypass Authentication Scanner vnc -i 5.2.128.0-5.2.159.255 -p 3389 -cT -T 1000. Результат: за 02:13 сек. 316 IP.

    Параметры командной строки masscan -p3389 5.2.128.0/19 --rate=1000 -oX myscan.xml. Результат: за 00:09 сек 315 IP.
     
    #1 Tmye, 24 Nov 2015
    Last edited: 27 Nov 2015
    3ran likes this.
  2. grimnir

    grimnir Members of Antichat

    Joined:
    23 Apr 2012
    Messages:
    1,097
    Likes Received:
    792
    Reputations:
    230
    _________________________
  3. Prog-t

    Prog-t New Member

    Joined:
    24 Nov 2015
    Messages:
    19
    Likes Received:
    2
    Reputations:
    0
  4. grimnir

    grimnir Members of Antichat

    Joined:
    23 Apr 2012
    Messages:
    1,097
    Likes Received:
    792
    Reputations:
    230
    https://zmap.io/documentation.html#args
    похоже,нет такой возможности(
     
    _________________________
  5. Prog-t

    Prog-t New Member

    Joined:
    24 Nov 2015
    Messages:
    19
    Likes Received:
    2
    Reputations:
    0
    да тоже там смотрел(печально( а masscan помойму же его аналог?
     
  6. Tmye

    Tmye Member

    Joined:
    24 Nov 2015
    Messages:
    17
    Likes Received:
    6
    Reputations:
    1
    ZMap под windows нет.

    Есть же черные и белые списки. В белом списке видимо и указывают нужные блоки IP.

    «Blacklisting and Whitelisting
    ZMap supports both blacklisting and whitelisting network prefixes. If ZMap is not provided with blacklist or whitelist parameters, ZMap will scan all IPv4 addresses (including local, reserved, and multicast addresses). If a blacklist file is specified, network prefixes in the blacklisted segments will not be scanned; if a whitelist file is provided, only network prefixes in the whitelist file will be scanned. A whitelist and blacklist file can be used in coordination; the blacklist has priority over the whitelist (e.g. if you have whitelisted 10.0.0.0/8 and blacklisted 10.1.0.0/16, then 10.1.0.0/16 will not be scanned). Whitelist and blacklist files can be specified on the command-line as follows:

    -b, --blacklist-file=path
    File of subnets to blacklist in CIDR notation, e.g. 192.168.0.0/16
    -w, --whitelist-file=path
    File of subnets to limit scan to in CIDR notation, e.g. 192.168.0.0/16»
     
    #6 Tmye, 4 Dec 2015
    Last edited: 4 Dec 2015
  7. fixerz

    fixerz Active Member

    Joined:
    12 Oct 2015
    Messages:
    94
    Likes Received:
    129
    Reputations:
    3
    победа очевидна)
    mascan решает:cool:
     
  8. terios

    terios Member

    Joined:
    3 Jan 2016
    Messages:
    12
    Likes Received:
    6
    Reputations:
    0
    Такой вопрос: кто-нибудь обращает внимание на то что некоторые диапазоны лучше не сканировать? Искал инфу по диапам которые сканировать нельзя, но инфа вся старая, диапазоны наверняка давно изменились. Кто что думает на этот счет?
     
    #8 terios, 17 Feb 2016
    Last edited: 17 Feb 2016
  9. grimnir

    grimnir Members of Antichat

    Joined:
    23 Apr 2012
    Messages:
    1,097
    Likes Received:
    792
    Reputations:
    230
    https://www.iblocklist.com/ тут есть обновляемые диапазоны
     
    _________________________
    ms13, terios and psihoz26 like this.
  10. DrCry1

    DrCry1 Member

    Joined:
    9 Dec 2017
    Messages:
    49
    Likes Received:
    16
    Reputations:
    0
    самые быстрые сечас это syn сканеры такие как tcp port scanner 1.5 и masscan
     
Loading...