Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: "Ping scan" through Google |
|---|---|
| Date: | Sun, 22 Jan 2006 13:39:16 +0000 |
Who cares if it's not the best code in the world. It's a very interesting idea from my point of view. I'm sure I'm *not* the only one who thinks the same. Thanks for posting something creative and interesting. On 1/20/06, Petr.Kazil@eap.nl <Petr.Kazil@eap.nl> wrote:
The way I do a "Google Ping scan" is so trivial and badly programmed that I'm almost ashamed to publish it. But since two people asked about it, I'll publish it anyway. This thing could be programmed much better using Perl and the Google API, but I haven't taken the time to do this. Suppose I want to scan the range: 221.208.146.1-255 (This is a random IP range that I got from one of the most recent SPAM mails that I received.) The Google search URL belonging to the spam sender's address 221.208.146.138 is: http://www.google.nl/search?hl=en&q=%22221.208.146.138%22&btnG=Search Now I cut off the last IP range from this string, replace it by a counter and wrap this in a VBScript file: =================================== Option Explicit Const IPRange = "221.208.146" Const ForWriting = 2 Dim objFSO, objFile, filename Dim urlpart1, urlpart2, url Dim i Dim objHTTP for i = 1 to 255 urlpart1="http://www.google.nl/search?hl=en&q=%22" urlpart2="%22&btnG=Search" url= urlpart1 & IPRange & "." & i & urlpart2 Set objHTTP = CreateObject("MSXML2.XMLHTTP") Call objHTTP.Open ("GET", url, FALSE) objHTTP.Send If InStr (objHTTP.ResponseText, "did not match any documents") > 0 Then ' do nothing Else filename = "Googlescan_" & IPRange & "." & i & ".htm" Set objFSO = CreateObject("Scripting.FileSystemObject") Set objFile = objFSO.OpenTextFile(filename, ForWriting, True, vbTrue) objFile.Write objHTTP.ResponseText objFile.Close End If wscript.sleep 6000 next =================================== That's all. (I hope I didn't leave a dumb bug in there ...) Now the above example (IP Range) is not the most suitable, because it looks like it's from a provider with a lot of outgoing IP-adresses, and it is in Chinese, so the websites are not very informative. But try this for your own company's IP-range and it should get more interesting. Greetings, Petr Kazil ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
-- pagvac (Adrian Pastor) www.ikwt.com - In Knowledge We Trust ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
| Previous by Date: | RE: Secure Password Policy?, Petr . Kazil |
|---|---|
| Next by Date: | Re: Tool to make mitm on ssh2, Cedric Foll |
| Previous by Thread: | Re: "Ping scan" through Google, Robert Wesley McGrew |
| Next by Thread: | Re: Secure Password Policy?, Neil |
| Indexes: | [Date] [Thread] [Top] [All Lists] |