Re: [Full-disclosure] Nmap Online

2006-12-06 Thread Schanulleke
Simon Smith wrote: Why would you do this? For all Nmap fans, our group have implemented Nmap Online service. Its address is http://nmap-online.com/. The interface allows you to perform custom Because you like lawers and being in court? ___

Re: [Full-disclosure] Nmap Online

2006-12-06 Thread Timo Schoeler
thus Schanulleke spake: Simon Smith wrote: Why would you do this? For all Nmap fans, our group have implemented Nmap Online service. Its address is http://nmap-online.com/. The interface allows you to perform custom Because you like lawers and being in court? lawyers are wimps :)

Re: [Full-disclosure] Nmap Online

2006-12-06 Thread Christian \Khark\ Lauf
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Greg wrote: I don't wish to upset anyone but that answer has to be the craziest FIRST port of call approach I have seen used. I get plenty of those sorts of calls. I take about 30 seconds time on the phone for almost all of them. I say Pull

Re: [Full-disclosure] Nmap Online

2006-12-06 Thread Greg
-Original Message- From: Christian Khark Lauf [mailto:[EMAIL PROTECTED] Sent: Thursday, 7 December 2006 5:22 AM To: full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] Nmap Online -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Greg wrote: I don't

Re: [Full-disclosure] Nmap Online

2006-12-06 Thread Mike Vasquez
1) I'm sure none of you can imagine this, but sometimes running and startup configs aren't the same. YES it's TRUE! So, your approach could be disastrous and is really ill advised. 2) Nmap may not give reliable results from all sites. Surely you've encounted ACLs that caused erroneous nmap

Re: [Full-disclosure] Nmap Online

2006-12-05 Thread Simon Smith
Why would you do this? On 11/28/06 3:19 AM, David Matousek [EMAIL PROTECTED] wrote: Hello, For all Nmap fans, our group have implemented Nmap Online service. Its address is http://nmap-online.com/. The interface allows you to perform custom Nmap scans from our server with only a few

Re: [Full-disclosure] Nmap Online

2006-12-05 Thread Ed Carp
On 12/5/06, Simon Smith [EMAIL PROTECTED] wrote: Why would you do this? Well, for one, sometimes you need to do a port scan when you're not in front of a system that has nmap installed on it. I get a call about once every couple of months, why can't I get into my email server that's sitting

Re: [Full-disclosure] Nmap Online

2006-12-05 Thread Greg
-Original Message- From: Ed Carp [mailto:[EMAIL PROTECTED] Sent: Wednesday, 6 December 2006 2:06 PM To: full-disclosure@lists.grok.org.uk Cc: David Matousek Subject: Re: [Full-disclosure] Nmap Online On 12/5/06, Simon Smith [EMAIL PROTECTED] wrote: Why would you do

Re: [Full-disclosure] Nmap Online

2006-12-05 Thread Richard A Nelson
On Wed, 6 Dec 2006, Greg wrote: I don't wish to upset anyone but that answer has to be the craziest FIRST port of call approach I have seen used. I get plenty of those sorts of calls. I take about 30 seconds time on the phone for almost all of them. I say Pull the power plug out of the

Re: [Full-disclosure] Nmap Online

2006-12-05 Thread Ed Carp
On 12/5/06, Greg [EMAIL PROTECTED] wrote: I don't wish to upset anyone but that answer has to be the craziest FIRST port of call approach I have seen used. I get plenty of those sorts of Who said it was the first thing that was tried? And you just can't pull the plug on a router in a

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Mike Huber
first of all, IANAL, but the TOS seem to cover the basics... However, I am unsure whether they would hold up under strict legal scrutiny. As far as I can tell, they may hold up under US criminal law, but not under civil law, as tort law has its own wonderful little eccentricities. The best

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Jason Miller
I agree with Dave on this one. Dude Van, I thought it was illegal in the states..? Or am I mistaken? Also, think of this from the ISP's view, do they really want a service port scanning their users? And look at it this way, said target has a proxy server on it, attacker proxies into the proxy and

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread David Taylor
Matousek Sent: Tuesday, November 28, 2006 3:19 AM To: full-disclosure@lists.grok.org.uk Subject: [Full-disclosure] Nmap Online Hello, For all Nmap fans, our group have implemented Nmap Online service. Its address is http://nmap-online.com/. The interface allows you to perform custom Nmap scans from

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 12/1/06, Jason Miller [EMAIL PROTECTED] wrote: I agree with Dave on this one. Dude Van, I thought it was illegal in the states..? Or am I mistaken? http://www.securityfocus.com/news/126 Also, think of this from the ISP's view, do they really want a service port scanning their users? And

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Col
Service unavailable. Please try again later. That was quick! Col. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread David Swafford
Maybe it got hacked? ...I wonder if someone probably didn't like all the portscans they got from it (thinks of Microsoft) and took it out? David. Col [EMAIL PROTECTED] 12/1/2006 7:48 am Service unavailable. Please try again later. That was quick! Col.

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread David Matousek
://www.shadowserver.org/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Matousek Sent: Tuesday, November 28, 2006 3:19 AM To: full-disclosure@lists.grok.org.uk Subject: [Full-disclosure] Nmap Online Hello, For all Nmap fans, our group have

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Michael Holstein
...I wonder if someone probably didn't like all the portscans they got from it (thinks of Microsoft) and took it out? David. Heck .. how to portscan Microsoft has been in the Nmap man page for ages (even in the help you get when you execute it without arguments) .. although it's not in

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 08:31:11 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude On 12/1/06, Mike Huber [EMAIL PROTECTED] wrote: first of all, IANAL, but the TOS seem to cover the basics... Dude snip None-the-less, my 8-ball sees

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 08:33:00 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude Here is an example of what is legal vs what isnt: If you scan a Dude machine with nmap from one machine, that is not illegal. If you run Dude 100,00 nmap scans

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Randal L. Schwartz
Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude On 12/1/06, Mike Huber [EMAIL PROTECTED] wrote: first of all, IANAL, but the TOS seem to cover the basics... Dude snip None-the-less, my 8-ball sees litigation in their future. Dude portscanning isnt illegal in the states If it can be

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Randal L. Schwartz
Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude Here is an example of what is legal vs what isnt: If you scan a Dude machine with nmap from one machine, that is not illegal. If you run Dude 100,00 nmap scans from a distributed botnet and take down their Dude server, thats illegal. It's

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 08:54:23 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude Its obvious that anyone who hires Stonehenge Consulting services is Dude getting someone who cant read. I never said postscanning was illegal. Dude i said it

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 08:54:23 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: If there's caselaw in Georgia, that's useful for Georgia, but certainly isn't referencable in the 49 other states. actually, it is. it is called legal precedence ___

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Randal L. Schwartz
Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude On 01 Dec 2006 08:54:23 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: If there's caselaw in Georgia, that's useful for Georgia, but certainly isn't referencable in the 49 other states. Dude actually, it is. it is called legal

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 12/1/06, Randall M [EMAIL PROTECTED] wrote: [ [-- [ [Message: 11 [Date: Fri, 1 Dec 2006 06:48:38 -0500 [From: Dude VanWinkle [EMAIL PROTECTED] [Subject: Re: [Full-disclosure] Nmap Online [To: Mike Huber [EMAIL PROTECTED] [Cc: full-disclosure

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 09:36:58 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude On 01 Dec 2006 08:54:23 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: If there's caselaw in Georgia, that's useful for Georgia, but certainly

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dave Moore
On 12/1/06, Mike Huber [EMAIL PROTECTED] wrote: first of all, IANAL, but the TOS seem to cover the basics... However, I am unsure whether they would hold up under strict legal scrutiny. As far as I can tell, they may hold up under US criminal law, but not under civil law, as tort law has its

[Full-disclosure] Nmap Online

2006-11-28 Thread David Matousek
Hello, For all Nmap fans, our group have implemented Nmap Online service. Its address is http://nmap-online.com/. The interface allows you to perform custom Nmap scans from our server with only a few limitations in the syntax. The service is free and can be used immediately, no registration is