OK, here's a tutorial I wrote a while ago when I was part of the warez scene. I've updated it to accomodate for latest changes. Should be useful for anyone on the warez scene who wants to start scanning.
Stage 1. - Download and Installation
First you need a programme. Now there are a couple of programmes out on the market but I find Grim Ping does the job and for the purpose of this guide, this is the programme we shall use.
Download the latest version of Grim's, available at
h**p://grimsping.cjb.net/cgi-bin/download.cgi?Ping
(Version 1.7.5 has been released!) and install.
Stage 2. - Configuration
If this is your first time running Grim's you will need to make
some small changes to the configuration.
Go to 'Options'...
Then click on the PubFind tab and go to General.
Now the Threads section can be altered depending on your own
Internet connection. As a rule the faster your connection the
more threads can be checked. As I am only on a 56k I tend to
leave my threads on 30. If you have cable then you can increase
it higher. Try going up in units of 10's and see what works for you.
Now click on the FireWall Tab.
It's entirely up to you if you want to use a firewall or not.
Personally I don't but it's YOUR decision. Some people I've
talked to say its a must, others say its a waist of time and
slows the scanning down. Its up to you!
Click onto the Logging Tag. In here you will have to select 'Log
Wingates during scan' (If you didn't already know, Wingate's can
be used as Proxies)
Click the Permissions tab at the top.
Make sure the 'Log Directory permissions' tag is selected.
Click the 'Logging' tab
Make sure 'Log OS Type', 'Log FXP stats', 'Log resumability' and
'log speed of 5 kbyte chunk' tag's are selected. Click SAVE!
That's it! Simple ey!
Now its time to start scanning.
Stage 3. - Scanning
Because the FBI and other various agencies are out to try and
catch scanners and FXP groups it is essential that you check an
IP range before you scan.
There are a few sites and posts that lists IP ranges to stay
away from. Alternatively I have posted a copy here...
http://forums.governmentsecurity.org/index...?showtopic=1227
For lists of other IP addresses, check out...
h**p://www.ipindex.de
Basically what you need to know is there are three categories of
IP addresses. There are large companies that work in the range
0.x.x.x to 127.x.x.x
This range is great if we can get pubs here but bear in mind
that big companies have greater security so BE CAREFULL!
Medium sized companies can be found in the range 128.0.x.x to
191.255.x.x and Small companies and home users can be found in the 192.0.0.x to 223.255.255.x ranges.
Once you have decided what range to scan, you will need to
create a queue. In Grim's hit F6. This will bring up the queue
box.
Insert the relevant IP address i.e. 127.100.50 the last two
boxes always stay the same 1 - 254. Click the 'Add Multiple
Ranges' button and insert the number of extra ranges to scan. I
usually set mine to about 255 or 510 (a long queue requires
little intervention.) and close the box.
That's it! Click go (or the traffic light sign) in the top left corner and see those pubs come running in.
That's it! Simple!
The results we are interested in are any that are in your perms.log (to get this hit F2).
