search

robertdavidgraham / masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
GNU Affero General Public License v3.0
23.55k stars 3.08k forks source link

banner grab #221

Open s3c1t opened 8 years ago

s3c1t commented 8 years ago

hi i scanned some of ports for banner grabbing with masscan but . Few of them banner grabbed for example: i scanned ftp ports of targets. from 155000 number ips just 1200 number banner grabbed. ./masscan -iL cidr-list --rate=1000 --banners -p 21 -oG ftp-result Now my question is: how to increase ips banner from ftp port

Greyh4t commented 8 years ago

You should use --source-ip

The address you choose has to be on the local subnet and not otherwise be used by another system.

ghost commented 8 years ago

If you do not have the option of using a free ipv4 adr on the same subnet, you can set up a local firewall, drop all packets on a range and have masscan use that range to send from.

mzpqnxow commented 8 years ago

@s3c1t , what @konlinedk is referring to is clearly referenced in the README.. for Linux something along the lines of 

iptables -A INPUT -p TCP --dport 60000 -j DROP
masscan --adapter-port 60000 --banners ...

... assuming you don't have an extra IP to use- this solution is simpler anyway IMO