Re: [PEN-TEST] Any way to speed up mapping for penetration testing?

["Weiss, Bill" <bill_weiss () ATT NET>]

Randy Molen(rpmolen () MAIL IT-PROTECT COM)@Thu, Mar 15, 2001 at 02:58:31PM -0500:
> Am currently working with a customer to map their network prior to
> penetration/vulnerability testing using NMap.  Customer doesn't allow Ping
> and wants 65000 ports tested.  Since we can't Ping, NMap takes a long time
> to test a single host resulting in a very long testing period.  We've tried
> setting a time-out value of 30 seconds but end up missing hosts with this
> value.  Has anyone had an experience like this and if so, any
> recommendations to efficiently map a network without Ping?

nmap -sS -vvv -PS -p 1-65000 -O -T Sneaky host_range
should work for you.  If not, do -T Paranoid, and wait a few days.

(-PS may be a rather new addition, I'm using nmap V. 2.54BETA22,
upgrade if needed)