[183782] in North American Network Operators' Group
Re: Synful Knock questions...
daemon@ATHENA.MIT.EDU (Stephen Fulton)
Wed Sep 16 10:34:01 2015
X-Original-To: nanog@nanog.org
To: nanog@nanog.org
From: Stephen Fulton <sf@lists.esoteric.ca>
Date: Wed, 16 Sep 2015 10:33:56 -0400
In-Reply-To: <55F97C6B.3020807@lists.esoteric.ca>
Errors-To: nanog-bounces@nanog.org
Follow-up to my own post, Fireeye has code on github:
https://github.com/fireeye/synfulknock
On 2015-09-16 10:27 AM, Stephen Fulton wrote:
> Interesting, anyone have more details on how to construct the scan using
> something like nmap?
>
> -- Stephen
>
> On 2015-09-16 9:20 AM, Royce Williams wrote:
>> HD Moore just posted the results of a full-Internet ZMap scan. I didn't
>> realize that it was remotely detectable.
>>
>> 79 hosts total in 19 countries.
>>
>> https://zmap.io/synful/
>>
>> Royce
>>