Everyone wants to write (or already did) its own TCP SYN scanner. Why? Because it is a fun exercise which will teach you a lot of things, like what raw sockets are and, more importantly, how to build packets. Perl for the task Some may argue that using Perl would be inefficient for such a task.
At networecon, we do massive Internet scanning. We do it like many others are doing it: SHODAN, ERIPP, governments?, to name a few. To correctly plan a scanning session, we need to know how long it will take regarding the task we want to accomplish. For that purpose, we use an Internet Scanning Calculator. For
The latest version of SinFP3 (v1.20, as of this writing) introduces two new cool features: the ability to perform a SYN scan and doing OS fingerprinting at the same time. The idea is to use SYN|ACK answers to the SYN scanning process to accurately identify the remote operating system nature. The second new feature is
Installation of SinFP3 under Debian/Ubuntu may be a bit tricky. They decided to rename one of the best low-level-hiding-thingy library initially called libdnet. Under these Linux distributions, the new name is libdumbnet. We will explain in this guide how to manually install SinFP3 on a fresh Debian/Ubuntu installation. Note: Net::Libdnet is now part of Ubuntu.