p0f 2.0.8 Passive OS Fingerprinting

P0f v2 is a versatile passive OS fingerprinting tool to an attacker to determine an operating system on:

machines that connect to your box (SYN)
machines you connect to (SYN/ACK)
machines you cannot connect to (RST)
machines whose communications you can observe (MiTM?)

P0f can also do many other tricks, and can detect or measure the following:

firewall presence, NAT use (useful for policy enforcement)
existence of a load balancer setup
the distance to the remote system and its uptime
target's network hookup (DSL, OC3, avian carriers) and its ISP

All this can be performed even when the device in question is behind an overzealous firewall or packet filters, when our usual active scanner such as nmap can't do much. P0f does not generate ANY additional network traffic, direct or indirect. No name lookups, no mysterious probes, no ARIN queries, nothing.

Download p0f here:
p0f 2.0.8

A windows port of p0f can be found here:
p0f 2.0.4 Windows Port

And you can find out more about p0f here.

Nmap 4.85 beta 9 port scanner released for download

Fyodor has recently released a new version of the popular security scanner.

Nmap is a "Network Mapper", which is used to discover computers and services on a computer network, thus creating a "map" of the network. Nmap is able to send IP packets different from the usual TCP/IP protocols used in order to get a response from the remote machine to determine what hosts are available on the network, what services and version are running on those machines, and also able to determine the operating system (OS) and also whether there is a firewall/packet filter in use.



Nmap can be run in both command line and graphical user interface (GUI) mode, which uses Zenmap, the official GUI frontend. Zenmap also features Topology, which is an interactive, animated visualization of the connections between hosts on a network. Hosts are shown as nodes on a graph that extends radially from the center. Click and drag to pan the display, and use the controls provided to zoom in and out. Click on a host and it becomes the new center. The graph rearranges itself in a smooth animation to reflect the new view of the network. Run a new scan and every new host and network path will be added to the topology automatically.



Several notable changes in this latest version are:

Multiple bugcrash fixes
Integrated 1,156 OS detection fingerprints
Detection includes Microsoft Windows 7 beta, Linux 2.6.28 etc
Improved SSL funtionality

For a complete list of changes, please visit here

Download the latest version of Nmap here:

Nmap 4.85 beta9

And you can find out more about Nmap here