How Do U Know The Os Of Pc

Help - Search - Member List - Calendar

Full Version: How Do U Know The Os Of Pc

GovernmentSecurity.org > System Security > Beginners Section

totof

Aug 21 2003, 06:04 PM

What is the scanner who find the OS

of someone????

silos

Aug 21 2003, 06:44 PM

NMAP, Retina, Languard, Xscan, etc etc etc.
NMAP used most 'cos of IDS-evasion.

vnet576

Aug 21 2003, 06:50 PM

QUOTE (silos @ Aug 21 2003, 06:44 PM)

NMAP, Retina, Languard, Xscan, etc etc etc.
NMAP used most 'cos of IDS-evasion.

Yep languard has always worked for me. It may be slow but it gives results every time.

silos

Aug 21 2003, 06:54 PM

And i believe there's a free version now for some reason.
Also if your using XSCAN make sure you use the 'SYN' option for better security.

wicked

Nov 11 2003, 07:37 AM

Was trying to Remember the Name of the scanner....Since someone would'nt help me... this certainly does.

Wkd.

.../

damulint

Dec 8 2003, 04:23 AM

Hi all.
I use Nmap option..
-O..
Nt in case..
Nbtstat -a using..
and..
Scan tools using..
etc..
Bye

gman24

Dec 8 2003, 04:29 AM

Mingsweeper, don't know if they have a recent version

decepticon

Dec 8 2003, 04:43 AM

You can use nessus if u have linux box....
Use retina (find cr**k by urself...okay..) if under windoze.....

wicked

Dec 13 2003, 08:09 PM

MingSweeper 1.00 alpha 5 (build 130)

MingSweeper is nearly ready for beta. Feedback on any issues encountered or suggestions are appreciated. The current alpha build may be downloaded right here : MingSweeper 1.00 alpha 5 (build 130) [518 kb]

Introduction

MingSweeper is a network reconnaissance tool designed to facilitate large address space,high speed node discovery and identification. MingSweeper is capable of performing Ping sweeps, Reverse DNS sweeps, TCP & UDP port scans, OS identification and application identification.
Features

Reverse DNS Sweeps
Ping Sweeps (currently ICMP only)
TCP Port Scan (full connect)
TCP Port Scan (SYN scan)
TCP Port Scan (NULL scan)
TCP Port Scan (FIN scan)
TCP Port Scan (XMAS scan)
TCP Port Filter Scan (ACK scan)
UDP Port Scan
Operating System Identification (utilises IP stack fingerprinting)
Application Identification (utilises banner grabbing)
Lazy DNS resolution
Comprehensive results presentation views with filtering/searching
Loading & Saving of scan results
Flexible target range specification

Screen Shots:

user posted image

Original Thread Here

Jst having a look at this one now... Long time no see Hoobie..

Wkd..

ikkyu

Dec 13 2003, 09:28 PM

xprobe for linux, extremely fast

Deadlocked

Dec 14 2003, 12:23 AM

yes, xprobe2, is the best thing i've found, not only by its speed... It has a really admirable precition (?) at the time of determining the OS. If you compare it with nmap guessing OS, i think this toy is the best for far (?).

PD: Excuse my poor english. ;P

LoCaliSe

Dec 14 2003, 01:41 AM

Very Good Soft

The-X

Dec 14 2003, 04:28 PM

LANGuard works great... try it http://www.gfi.com

dfx

Dec 16 2003, 11:18 PM

don't forget about queso and p0f, both linux tools.

p0f -- http://lcamtuf.coredump.cx/p0f.shtml

queso -- http://www.apostols.org/ - this page is down right now, so try packetstorm
-- http://packetstormsecurity.nl/UNIX/scanner...o-980922.tar.gz

peresvet

Dec 16 2003, 11:44 PM

and how can i do that without a scanner?

m0n

Dec 17 2003, 08:00 AM

Without a scanner? If they have a webserver you can try a website that will retrieve the webservers ID tag. Netcraft dot com seems to be a popular site for such things like that.

Cyrus

Dec 17 2003, 01:44 PM

Thx @ wicked for this really nice scanner

Tx_

Dec 17 2003, 02:14 PM

there are plenty of good scanners out there

Tx_

Dec 17 2003, 02:15 PM

as everyone eles has already told you

Deadlocked

Dec 18 2003, 02:55 AM

QUOTE (peresvet @ Dec 16 2003, 11:44 PM)

and how can i do that without a scanner?

Mmm, There are many tools out there just to fingerprint a box (both active and passive). But if u r refering to do it manually (that's like inventing the wheel again) you should get a packet generator and start sending tcp/ip packets with different flags/parameters conbinations and seeing what the server responses, work out what OS is it running by comparing with a OS fingerprint database (Madness). An easiest way (but closer to fail) is to listen to the traffic of the server and check some TCP/IP parameters (window size, ToS, DF and TTL mainly) and again comparing with a database.
That's basically what this kind of tools do.

peresvet

Dec 18 2003, 07:25 PM

thx Deadlocked

randalizm

Jan 6 2004, 11:31 AM

good old ftp http telnet banna grab! i can think of but not as useful as a gui

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.