Nmap Development mailing list archives

Re: proxy patch


From: "Luis A. Bastiao Silva" <luis.kop () gmail com>
Date: Tue, 10 Mar 2009 22:13:13 +0000

Hi,

Please, try answer to the mailing list. :-)

I was testing with verbose, http_proxy. Something is wrong. Take a look:

Initiating Proxy scan (TCP) at 22:03
Scanning scanme.nmap.org (64.13.134.52) [1 port]
1st successfully connected to proxy.ua.pt:3128
HTTP Connect to 64.13.134.52:80
HTTP Connect error!
Completed Proxy scan (TCP) at 22:03, 0.07s elapsed (1 total ports)
Host scanme.nmap.org (64.13.134.52) appears to be up ... good.
0 ports scanned on scanme.nmap.org (64.13.134.52)

And sock5:

Initiating Parallel DNS resolution of 1 host. at 22:07
Completed Parallel DNS resolution of 1 host. at 22:07, 0.04s elapsed
Initiating Proxy scan (TCP) at 22:07
Scanning scanme.nmap.org (64.13.134.52) [1 port]
1st successfully connected to proxy.ua.pt:1080
SOCKS5 connection error: 0x02
Completed Proxy scan (TCP) at 22:07, 0.10s elapsed (1 total ports)
Host scanme.nmap.org (64.13.134.52) appears to be up ... good.
0 ports scanned on scanme.nmap.org (64.13.134.52)

Read data files from: /usr/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 0.20 seconds

Unfortunately it doesn't work as expected.It should be show something like
that:
PORT   STATE SERVICE
80/tcp open  http
Simply, it didn't appear.

It seemed that something is wrong with patch. OR: Could be the proxy
blocking scanning or something like that?

If I have some time I'll see the code of patch. Or if you know a better way
I'm offering my help to put it working correctly or verify if it is really a
proxy blocking system.


On Tue, Mar 10, 2009 at 3:17 PM, Z P <panczelz () gmail com> wrote:

Ok :) im happy if the patch works.
Yes, the patch doesnt work with 4.85BETA because we made it for the 4.73
stable.
Im waiting for the tests results of the SOCKS5.

Thank you.

Best Regards,

PZ

2009/3/10 Luis A. Bastiao Silva <luis.kop () gmail com>:
I'm sorry.

I was using proxy of my university. And I put the wrong port. Sorry.
Now it works fine for me!

But the patch doesn't work against 4.83BETA, neither svn version.

If my opinion have some value for someone else this patch should be
apply.

Note: I just tested with http proxy.
Soon I'll also test with SOCK5.

Thanks for the patch, it's really useful.


On Tue, Mar 10, 2009 at 1:27 PM, Z P <panczelz () gmail com> wrote:

Hi Luis!

Please download the latest version of the patch from nmap-dev.fw.hu
This works fine for me :)
What is your os type?

Here is my output:

panzol@xubuntu:~/nmap2$ ./nmap --http-proxy localhost:18888
scanme.nmap.org -v -p80

Starting Nmap 4.76 ( http://nmap.org ) at 2009-03-10 14:18 CET
Initiating Parallel DNS resolution of 1 host. at 14:18
Completed Parallel DNS resolution of 1 host. at 14:18, 0.74s elapsed
Initiating Proxy scan (TCP) at 14:18
Scanning scanme.nmap.org (64.13.134.52) [1 port]
1st successfully connected to localhost:18888
HTTP Connect to 64.13.134.52:80
Discovered open port 80/tcp on 64.13.134.52
Completed Proxy scan (TCP) at 14:18, 0.22s elapsed (1 total ports)
Host scanme.nmap.org (64.13.134.52) appears to be up ... good.
Interesting ports on scanme.nmap.org (64.13.134.52):
PORT   STATE SERVICE
80/tcp open  http

Read data files from: .
Nmap done: 1 IP address (1 host up) scanned in 1.70 seconds

I'm testing now the patch functionality with different proxies from
http://www.proxy4free.com/page1.html and works fine also.

So please download the latest patch and test it and write to me output
and the os type.

Thank you for the test !

Best Regards,

PZ



2009/3/10 Luis A. Bastiao Silva <luis.kop () gmail com>:
Hi Zoltan!

Firstly I'm sorry for delay.

Sounds really good have nmap supporting proxy.

I was testing it but it seems doesn't work:

bastiao:nmap-4.76 luis$ ./nmap --http-proxy myproxy:3028
scanme.nmap.org
-v
-p80

Starting Nmap 4.76 ( http://nmap.org ) at 2009-03-10 09:54 WET
Warning: File ./nmap-services exists, but Nmap is using
/usr/share/nmap/nmap-services for security and consistency reasons.
set
NMAPDIR=. to give priority to files in your local directory (may
affect
the
other data files too).
Initiating Parallel DNS resolution of 1 host. at 09:54
Completed Parallel DNS resolution of 1 host. at 09:54, 0.00s elapsed
Initiating Proxy scan (TCP) at 09:54
Scanning scanme.nmap.org (64.13.134.52) [1 port]
[Freeze here]





On Wed, Feb 18, 2009 at 8:35 AM, Z P <panczelz () gmail com> wrote:

Hi!

Yes, of course :)
If you want use one proxy:
./nmap --socks4 1.1.1.1:1080 <target>
./nmap --socks5 1.1.1.1:1081 <target>
./nmap --http-proxy 1.1.1.1:8080 <target>

if you want use more than one proxy
./nmap --socks4 1.1.1.1:1080,1.1.1.2:1080,1.1.1.3:1080 <target>
./nmap --socks5 1.1.1.1:1081,1.1.1.2:1081,1.1.1.3:1081 <target>
./nmap --http-proxy 1.1.1.1:8080,1.1.1.2:8080,1.1.1.3:8080 <target>

And if you want use more than one proxy type

./nmap --socks5 1.1.1.1:1080 --socks4 1.1.1.2:1081 --http-proxy
1.1.1.3:8080 <target>
./nmap --socks5 1.1.1.1:1080 --http-proxy 1.1.1.3:8080 <target>
...and so on any mix...

With the verbose parameter you can get more information about the
connection procedure.
Please download the last patch from the webpage, because i have
corrected some bugs :)

Thank you for the test :)

Zoltan Panczel

2009/2/17 David Fifield <david () bamsoftware com>:
On Mon, Feb 02, 2009 at 02:45:50PM +0100, Z P wrote:
I have been writing a brand new proxy patch for nmap.
Please test it and report the problems and any other comments.

Here is the patch and some information about the patch:
http://nmap-dev.fw.hu

I have had a quick look at the patch. I like that it is fairly
compact.
Can you write back with example usage? Send a command line for a
simple
example of scanning through one proxy, and then another example
with
chaining.

Is there a way to make a proxy chain with proxies of different
types?

David Fifield


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Regards,
--
Luís A. Bastião Silva




Regards
--
Luís A. Bastião Silva





Best Regards
-- 
Luís A. Bastião Silva

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org


Current thread: