Top 10 NMap Command Variant used by Pentesters

This is actually a video I made simply to highlight the most commonly used NMap command by pentester in their daily job. Well, this is a very simple command - output video that I used against a virtual machine of mine. Below are the list of commands I have highlighted in the video (in case you want a static non-moving reference). Do share if you find this video helpful and follow me at @SecurityBazinga and my Youtube channel Security Bazinga Youtube Channel. Thanks folks!

NMap Commands Used in this Video

• nmap -sP [IPAddressRange] - Ping sweep the whole subnet to see what host is alive
• nmap -sT [IPAddress] - Establish a complete 3 way handshake with Target Host & port scan (Non-stealthy and easily leaves traces)
• nmap -sS [IPAddress] - Establish an incomplete 3 way handshakre with Target Host & port scan (Stealthy and less traces)
• nmap -F [IPAddress] - By default NMap does port scan using the Top 1000 commonly used ports in the Internet. To do a much faster scan, use -F to scan Top 100 commonly used ports in the Internet.
• nmap [IPAddress] -p [portnum/range] - Does port scan on Target Host only to the ports mentioned.
• nmap -sV [IPAddress] - Does port scan and version scan on the service listening on the respective ports.
• nmap [IPAddress] --reason - Displays the reason why NMap  determined the port is either open, closed or filtered.
• nmap -O [IPAddress] - Does a OS fingerprinting scan to identify what OS the Target Host is running on.
• nmap [IPAddress] -oA [filename] - Outputs the result of NMap in 3 different files (txt, greppable format and xml format)
• P, V, D - This can be done interactively while the scan is running. To turn on the packet trace function, press the p key. This will display the packets that are being sent by NMap to the target host (sniffer). To turn on Verbosity, press the v key. This is to display the verbosity and more information about the scan to the user. Example of information would be number of packet sent, ports discovered open and responding etc. Debugging is another feature which can be turned on using the key d. This is to show the debugging information of the scan while it is running.

Fogpad: Document Editor with Encryption for Google Drive

Everybody uses cloud storage now. Some of the big name is Dropbox, Google Drive, SkyDrive and many other nameable drives out there. Each cloud storage has its own capabilities, storage space and multiple add-ons that is used to enhance its capabilities. One such add on is done for Google Drive where there is a tool that can be used to create and encrypt your documents on the fly. Cool enough eh. Let’s see how it works.

So this FogPad (Only God knows what it means) is a tool used to create and edit documents (similar to Microsoft Office) and saves it automatically in your Google Drive storage. The good thing about this is, whenever you are creating a document (for Free account, you can create up to 10 documents) it will prompt you to password protect your documents (each and every one of them) and it will encrypt it with so called Military grade encryption which is 256 bits AES algorithm. Which is cool. You don’t have to install or use any other third party app in your machine before you can upload a password encrypted military grade encryption algorithm to your storage.

Send Your Secrets And Let it Self Destruct the Mission Impossible Way

We all have seen Mission Impossible. Do you remember for every mission, Ethan Hunt takes up, he will be informed about the mission in a very unique way and at the end of the message it will say it will self-destruct? After that we see whatever medium that was used to communicate with Ethan Hunt blows up (Watch the video above for a clearer understanding). And we will be like WOW that’s awesome man. Well now you have a chance to do something similar like that just that it does not blows up. It shreds itself. This is a very interesting service (I think the first on the net) which is so easy, does not require any registration or logins and you can send an encrypted self-destructive note in 30 seconds. Cool huh? Let’s see what it is.

Web Base Email Encryption: Mailvelope vs SecureGmail

After the PRISM’s intention has been shed on broad day light, people get paranoid over the things they do in the Net. Email is certainly one of their concerns. Given that the Electronic Communications Privacy Act is still in debate, this PRISM thingy is just adding in the horror. It is also said that any encrypted emails, messages or files will be kept even longer by the NSA until they see what’s inside the secure envelope you are sending out.

Today I am going to share with you ways to secure one aspect of the “Big Boy’s” watch list. The emails. Emails has been crucial nowadays from cooperate usage until personal usages. Gone were the days where people install email client in their machine to use emails (well some of them still do) but people nowadays are very happy in what the web base emails can give them. Cutting of the configuration time and getting the right settings on place, now you can do almost anything in web. There was something lacking in web base emails which is encryption. With email clients such as Thunderbird, Outlook and etc, you have the option to encrypt the emails using PGP methodology however in web based emails they are just not there yet (or maybe forever). Well I don’t think the email providers would ever do that feature built in their emails on web but however some people who are concerned about security made a few tools that can help us to achieve just that missing part in the web based emails.