Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 82 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow Amateur Networking Tool 'NETFind'
EH-Net
May 18, 2013, 12:41:09 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Amateur Networking Tool 'NETFind'  (Read 5941 times)
0 Members and 1 Guest are viewing this topic.
N15M0
Newbie
*
Offline Offline

Posts: 16


I hack, to learn more. I learn more, to hack.


View Profile
« on: July 26, 2010, 05:18:10 AM »

Hi everyone.

I am in the final developing stages of my Matric I.T project, and I'd like some input on it.

NETFind is a project I started near the beginning of the year. It is a networking tool that will ping a user defined IP range or scan a Windows domain to discover 'active' IPs using Host Name and Host Address resolution. This scan data is then added to an array and may be viewed in table format, and can also be saved to a text file.

I figured the tool may be handy to an ethical hacker if access to a network is available to continue their security report.

Java is the language I used for this program(I may re-develop it at the end of the year in C#).

Just a few more days till its' completion Smiley  Please PM me with your email if you are interested, I would really appreciate any comments...

Jarod K
Logged
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #1 on: July 26, 2010, 06:39:00 AM »

Does it support TCP and UDP or is it just ICMP ping? What other ICMP types does it support besides ICMP echo? Are their any options for selecting source and destination ports? Are their options for modifying TCP packet flags?
Logged
Dutchie
Newbie
*
Offline Offline

Posts: 33


View Profile
« Reply #2 on: July 26, 2010, 07:49:46 AM »


Sounds interesting!

Best to provide it to some people in a Beta-version and let them test the technical and functional merits of the tool!!

Logged

RA, CISA, CISSP, C|EH, C|HFI, CWSP, LPIC-1
N15M0
Newbie
*
Offline Offline

Posts: 16


I hack, to learn more. I learn more, to hack.


View Profile
« Reply #3 on: July 26, 2010, 08:06:59 AM »

Well unfortunately, at the moment, the method InetAddress.isReachable() in Java will typically use an ICMP ping, and if this privilege is unobtainable, a TCP connection on the destination computers echo port(7).

Although it may not be too 'exciting' or overwhelming, near the end of the year I intend to increase the functionality and adding numerous detection techniques.

I originally decided to begin this project because no 'sure fire' way of detecting IPs on a network is available. Hopefully once I do a bit more research I will be able to incorporate a method of IP detection which will lay below firewall radars(my school firewall will no allow any echo requests, but I still manage to get their IPs through the domain scan).Smiley

Thank you Dutchie:) I hopefully intend to get some input and advice by letting EH-Net users try it out
Logged
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #4 on: July 26, 2010, 08:56:46 AM »

Do make the Beta-version available. I'm sure you'll receive lots of helpful inputs.

I'm not a Java programmer but it looks like that Java doesn't provide support which a discovery tool like yours will need.http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4727550 Reprogramming it in C# might be a better option. But I'm not sure so I hope someone corrects me.

Any tool, build specifically for network sweeping should at least have the feature listed here http://nmap.org/book/man-host-discovery.html
Logged
Synquell
Full Member
***
Offline Offline

Posts: 169



View Profile
« Reply #5 on: July 26, 2010, 09:20:58 AM »

Nmap is somewhat the king of scanning, so certainly follow Equin3x there Smiley
They also have a (rather recent) side project, called NPing (http://nmap.org/nping/)
You might, as Equix3n suggests, use their functionality as an inspiration.
But don't be de-motivated by them. They do a lot, but new tools give new opportunities Smiley

I am afraid though that Java might not be low-level enough to be an ideal language for such a tool. Not sure if this is true, but I'm sure other EHN'ers have a better opinion on that matter.

Good luck with your work!
Logged

Twitter: https://twitter.com/dietervds
Blog: https://synquell.wordpress.com (not much there yet)

The beginning of knowledge is the discovery of something we do not understand.
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #6 on: July 26, 2010, 04:08:36 PM »

Quote
You might, as Equix3n suggests, use their functionality as an inspiration.
But don't be de-motivated by them.
No no. Didn't mean to demotivate him. I just wanted to give an idea of features which any descent ping sweep utility should encompass. Personally, I believe that there's space for more than one tool for a certain task. Think of it, Nmap is the king for version scanning too, but people still like to use Amap, isn't it?
Logged
Synquell
Full Member
***
Offline Offline

Posts: 169



View Profile
« Reply #7 on: July 27, 2010, 03:25:17 AM »

No no. Didn't mean to demotivate him. I just wanted to give an idea of features which any descent ping sweep utility should encompass.
I know you didn't m8, I was basicly agreeing with you Wink
Logged

Twitter: https://twitter.com/dietervds
Blog: https://synquell.wordpress.com (not much there yet)

The beginning of knowledge is the discovery of something we do not understand.
N15M0
Newbie
*
Offline Offline

Posts: 16


I hack, to learn more. I learn more, to hack.


View Profile
« Reply #8 on: July 27, 2010, 08:39:03 AM »

Hi again everyone Smiley

The BETA for NETFind version 3 is officially done  Grin

Please PM or email me if you would like to try it out... Please do, I could really use the input.

The current zipped .jar executable is 57Kb, so remember to buy some new cap Tongue

My project is to be handed in on Friday the 30th, so please, any input will be immensly appreciated!

Quote
You might, as Equix3n suggests, use their functionality as an inspiration.
But don't be de-motivated by them.
No no. Didn't mean to demotivate him. I just wanted to give an idea of features which any descent ping sweep utility should encompass. Personally, I believe that there's space for more than one tool for a certain task. Think of it, Nmap is the king for version scanning too, but people still like to use Amap, isn't it?
Don't worry, I'm not demotivated at all. Reading the Nmap site had broadened my view to network sweeping, and in this have found inspiration to research these techniques further. Thank you so much for your input Smiley What do you mean by 'Amap' though?

Thank you Anquilas, I realise that Java is'nt some what of a low-level language to be doing this sort of thing... Later tin the year once I've written my final exams, I will definately attempt to try this in C# becuase from the link Equix3n posted, it seems Java has no functionality with technical socket programming. Java is the chosen language of my high school I.T class, as my school did not choose Delphi, and this project requires the program to be created in Java unfortunately...
Logged
secureseven
Jr. Member
**
Offline Offline

Posts: 79



View Profile
« Reply #9 on: July 27, 2010, 09:22:10 AM »

Have you looked at jpcap library? It's pretty good, but the documentation is horrible.
http://netresearch.ics.uci.edu/kfujii/jpcap/doc/
hope that helps.

post-script: amap is another type of scanner.
Logged

http://twitter.com/mikesantillana
eLearnSecurity Team Member.
UNIX
Hero Member
*****
Offline Offline

Posts: 1234


View Profile
« Reply #10 on: July 27, 2010, 09:28:07 AM »

You could upload your program to a one-click hoster such as Rapidshare, Megaupload, and the like. This might get you more feedback.

Quote
What do you mean by 'Amap' though?
http://freeworld.thc.org/thc-amap/
Logged
Synquell
Full Member
***
Offline Offline

Posts: 169



View Profile
« Reply #11 on: July 27, 2010, 10:12:00 AM »

Have you looked at jpcap library? It's pretty good, but the documentation is horrible.
http://netresearch.ics.uci.edu/kfujii/jpcap/doc/
hope that helps.
I've looked at jpcap a while ago for a project in my corp, but it is idd far from perfect. Most of all: no decent 64bit system support (which is needed here)
I've been using jNetPcap to some degree of success though. It's a bit more complex then jpcap I think but it does have the advantage of being under active development.
http://jnetpcap.com/

Not sure if it's useful info, but just to make sure Smiley
Logged

Twitter: https://twitter.com/dietervds
Blog: https://synquell.wordpress.com (not much there yet)

The beginning of knowledge is the discovery of something we do not understand.
N15M0
Newbie
*
Offline Offline

Posts: 16


I hack, to learn more. I learn more, to hack.


View Profile
« Reply #12 on: July 27, 2010, 09:51:31 PM »

Have you looked at jpcap library? It's pretty good, but the documentation is horrible.
http://netresearch.ics.uci.edu/kfujii/jpcap/doc/
hope that helps.
Ah yes, when I first started I came across the jpcap library, lol the documentation is horrible...

You could upload your program to a one-click hoster such as Rapidshare, Megaupload, and the like. This might get you more feedback.
Thanx awesec, I intended to ask some of the EHN users to try it out first, I intend to become one myself after varsity, then collage. I might one day though, once I've received enough info to put it out there.

I've looked at jpcap a while ago for a project in my corp, but it is idd far from perfect. Most of all: no decent 64bit system support (which is needed here)
I've been using jNetPcap to some degree of success though. It's a bit more complex then jpcap I think but it does have the advantage of being under active development.
http://jnetpcap.com/

Not sure if it's useful info, but just to make sure Smiley
Thanx so much Anquilas, it seems very intresting Smiley I will be writing exams soon, and maybe I'll fiddle with that a bit.
Logged
Equix3n-
Sr. Member
****
Offline Offline

Posts: 386



View Profile
« Reply #13 on: July 28, 2010, 01:11:35 AM »

I know you didn't m8, I was basicly agreeing with you Wink
My post was intended for the OP Wink
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.084 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.