Tunneling nmap through Tor
Posted June 26, 2009 at 11:05 pm in Pen Testing, PrivacyI looked at how to reduce your exposure using Tor earlier in the week. We installed Tor and Privoxy and configured our system to browse the Internet anonymously. We can use Tor and another great program called proxychains to Torify our network scans with nmap.
Before I continue I would like to recommend to anyone who doesn’t know what Tor is to read the aforementioned post. My post will walk you through installing Tor and provide additional background information. For anyone who doesn’t know what nmap is, you must be stuck on stuck on a Bell 103. All joking aside, ,map, short for network mapper, is a free and open source utility for network exploration or security auditing. It was created by Gordon “Fyodor” Lyon and has come a long way since its inception. A brief summary of its transformation: nmap’s original source code contained lines such as “fprintf(stderr, “Your ftp bounce server sucks, it won’t let us feed bogus ports!\n”);” and transformed itself into a movie star when it was featured in The Matrix Reloaded. It is used by network admins, system admins, and security professionals alike. You can find more detailed information at nmap.org.
Educate yourself using your Apple iPhone and MIT OpenCourseWare
Posted June 22, 2009 at 10:33 pm in GeneralI received an iPhone 3GS in the mail today. I’m always excited to receive a new toy but to be honest I wasn’t as excited as I would’ve been had the box said Newegg on the side. This is my first Apple iPhone and first smart phone. My old Motorola RAZR was on its last leg so I decided three weeks ago to finally replace it. Luckily for me AT&T had difficulty procuring a regular 3G iPhone and the phone was placed on backorder because the announcement of the new 3G S came a few days later. I decided to purchase the 3G S for $199 instead of paying $150 for a refurbished regular 3G.
A while ago we looked at using Tor and Privoxy to allow us to remain anonmyous while browsing the web. I briefly mentioned SOCKS while we were configuring our web browser to route traffic through the onion network. This prompted me to take a deeper look at SOCKS.