.

Amateur Networking Tool 'NETFind'

<<

N15M0

User avatar

Newbie
Newbie

Posts: 16

Joined: Wed Jun 09, 2010 1:56 pm

Post Mon Jul 26, 2010 5:18 am

Amateur Networking Tool 'NETFind'

Hi everyone.

I am in the final developing stages of my Matric I.T project, and I'd like some input on it.

NETFind is a project I started near the beginning of the year. It is a networking tool that will ping a user defined IP range or scan a Windows domain to discover 'active' IPs using Host Name and Host Address resolution. This scan data is then added to an array and may be viewed in table format, and can also be saved to a text file.

I figured the tool may be handy to an ethical hacker if access to a network is available to continue their security report.

Java is the language I used for this program(I may re-develop it at the end of the year in C#).

Just a few more days till its' completion :)  Please PM me with your email if you are interested, I would really appreciate any comments...

Jarod K
<<

Xen

User avatar

Sr. Member
Sr. Member

Posts: 386

Joined: Tue Feb 03, 2009 3:59 am

Post Mon Jul 26, 2010 6:39 am

Re: Amateur Networking Tool 'NETFind'

Does it support TCP and UDP or is it just ICMP ping? What other ICMP types does it support besides ICMP echo? Are their any options for selecting source and destination ports? Are their options for modifying TCP packet flags?
<<

Dutchie

Newbie
Newbie

Posts: 33

Joined: Sat Jan 23, 2010 1:48 pm

Post Mon Jul 26, 2010 7:49 am

Re: Amateur Networking Tool 'NETFind'

Sounds interesting!

Best to provide it to some people in a Beta-version and let them test the technical and functional merits of the tool!!
RA, CISA, CISSP, C|EH, C|HFI, CWSP, LPIC-1
<<

N15M0

User avatar

Newbie
Newbie

Posts: 16

Joined: Wed Jun 09, 2010 1:56 pm

Post Mon Jul 26, 2010 8:06 am

Re: Amateur Networking Tool 'NETFind'

Well unfortunately, at the moment, the method InetAddress.isReachable() in Java will typically use an ICMP ping, and if this privilege is unobtainable, a TCP connection on the destination computers echo port(7).

Although it may not be too 'exciting' or overwhelming, near the end of the year I intend to increase the functionality and adding numerous detection techniques.

I originally decided to begin this project because no 'sure fire' way of detecting IPs on a network is available. Hopefully once I do a bit more research I will be able to incorporate a method of IP detection which will lay below firewall radars(my school firewall will no allow any echo requests, but I still manage to get their IPs through the domain scan).:)

Thank you Dutchie:) I hopefully intend to get some input and advice by letting EH-Net users try it out
<<

Xen

User avatar

Sr. Member
Sr. Member

Posts: 386

Joined: Tue Feb 03, 2009 3:59 am

Post Mon Jul 26, 2010 8:56 am

Re: Amateur Networking Tool 'NETFind'

Do make the Beta-version available. I'm sure you'll receive lots of helpful inputs.

I'm not a Java programmer but it looks like that Java doesn't provide support which a discovery tool like yours will need.http://bugs.sun.com/bugdatabase/view_bu ... id=4727550 Reprogramming it in C# might be a better option. But I'm not sure so I hope someone corrects me.

Any tool, build specifically for network sweeping should at least have the feature listed here http://nmap.org/book/man-host-discovery.html
<<

Anquilas

User avatar

Full Member
Full Member

Posts: 169

Joined: Fri Mar 19, 2010 7:50 am

Location: Belgium

Post Mon Jul 26, 2010 9:20 am

Re: Amateur Networking Tool 'NETFind'

Nmap is somewhat the king of scanning, so certainly follow Equin3x there :)
They also have a (rather recent) side project, called NPing (http://nmap.org/nping/)
You might, as Equix3n suggests, use their functionality as an inspiration.
But don't be de-motivated by them. They do a lot, but new tools give new opportunities :)

I am afraid though that Java might not be low-level enough to be an ideal language for such a tool. Not sure if this is true, but I'm sure other EHN'ers have a better opinion on that matter.

Good luck with your work!
Twitter: https://twitter.com/dietervds
Blog: https://synquell.wordpress.com (not much there yet)

The beginning of knowledge is the discovery of something we do not understand.
<<

Xen

User avatar

Sr. Member
Sr. Member

Posts: 386

Joined: Tue Feb 03, 2009 3:59 am

Post Mon Jul 26, 2010 4:08 pm

Re: Amateur Networking Tool 'NETFind'

You might, as Equix3n suggests, use their functionality as an inspiration.
But don't be de-motivated by them.

No no. Didn't mean to demotivate him. I just wanted to give an idea of features which any descent ping sweep utility should encompass. Personally, I believe that there's space for more than one tool for a certain task. Think of it, Nmap is the king for version scanning too, but people still like to use Amap, isn't it?
<<

Anquilas

User avatar

Full Member
Full Member

Posts: 169

Joined: Fri Mar 19, 2010 7:50 am

Location: Belgium

Post Tue Jul 27, 2010 3:25 am

Re: Amateur Networking Tool 'NETFind'

Equix3n- wrote:No no. Didn't mean to demotivate him. I just wanted to give an idea of features which any descent ping sweep utility should encompass.

I know you didn't m8, I was basicly agreeing with you ;)
Twitter: https://twitter.com/dietervds
Blog: https://synquell.wordpress.com (not much there yet)

The beginning of knowledge is the discovery of something we do not understand.
<<

N15M0

User avatar

Newbie
Newbie

Posts: 16

Joined: Wed Jun 09, 2010 1:56 pm

Post Tue Jul 27, 2010 8:39 am

Re: Amateur Networking Tool 'NETFind'

Hi again everyone :)

The BETA for NETFind version 3 is officially done  ;D

Please PM or email me if you would like to try it out... Please do, I could really use the input.

The current zipped .jar executable is 57Kb, so remember to buy some new cap :P

My project is to be handed in on Friday the 30th, so please, any input will be [glow=red,2,300]immensly[/glow] appreciated!

Equix3n- wrote:
You might, as Equix3n suggests, use their functionality as an inspiration.
But don't be de-motivated by them.

No no. Didn't mean to demotivate him. I just wanted to give an idea of features which any descent ping sweep utility should encompass. Personally, I believe that there's space for more than one tool for a certain task. Think of it, Nmap is the king for version scanning too, but people still like to use Amap, isn't it?

Don't worry, I'm not demotivated at all. Reading the Nmap site had broadened my view to network sweeping, and in this have found inspiration to research these techniques further. Thank you so much for your input :) What do you mean by 'Amap' though?

Thank you Anquilas, I realise that Java is'nt some what of a low-level language to be doing this sort of thing... Later tin the year once I've written my final exams, I will definately attempt to try this in C# becuase from the link Equix3n posted, it seems Java has no functionality with technical socket programming. Java is the chosen language of my high school I.T class, as my school did not choose Delphi, and this project requires the program to be created in Java unfortunately...
<<

secureseve

User avatar

Jr. Member
Jr. Member

Posts: 79

Joined: Thu Apr 08, 2010 10:40 pm

Location: DMZ

Post Tue Jul 27, 2010 9:22 am

Re: Amateur Networking Tool 'NETFind'

Have you looked at jpcap library? It's pretty good, but the documentation is horrible.
http://netresearch.ics.uci.edu/kfujii/jpcap/doc/
hope that helps.

post-script: amap is another type of scanner.
http://twitter.com/mikesantillana
eLearnSecurity Team Member.
<<

UNIX

User avatar

Hero Member
Hero Member

Posts: 1244

Joined: Mon Apr 28, 2008 9:20 am

Post Tue Jul 27, 2010 9:28 am

Re: Amateur Networking Tool 'NETFind'

You could upload your program to a one-click hoster such as Rapidshare, Megaupload, and the like. This might get you more feedback.

What do you mean by 'Amap' though?

http://freeworld.thc.org/thc-amap/
<<

Anquilas

User avatar

Full Member
Full Member

Posts: 169

Joined: Fri Mar 19, 2010 7:50 am

Location: Belgium

Post Tue Jul 27, 2010 10:12 am

Re: Amateur Networking Tool 'NETFind'

secureseven wrote:Have you looked at jpcap library? It's pretty good, but the documentation is horrible.
http://netresearch.ics.uci.edu/kfujii/jpcap/doc/
hope that helps.

I've looked at jpcap a while ago for a project in my corp, but it is idd far from perfect. Most of all: no decent 64bit system support (which is needed here)
I've been using jNetPcap to some degree of success though. It's a bit more complex then jpcap I think but it does have the advantage of being under active development.
http://jnetpcap.com/

Not sure if it's useful info, but just to make sure :)
Twitter: https://twitter.com/dietervds
Blog: https://synquell.wordpress.com (not much there yet)

The beginning of knowledge is the discovery of something we do not understand.
<<

N15M0

User avatar

Newbie
Newbie

Posts: 16

Joined: Wed Jun 09, 2010 1:56 pm

Post Tue Jul 27, 2010 9:51 pm

Re: Amateur Networking Tool 'NETFind'

secureseven wrote:Have you looked at jpcap library? It's pretty good, but the documentation is horrible.
http://netresearch.ics.uci.edu/kfujii/jpcap/doc/
hope that helps.

Ah yes, when I first started I came across the jpcap library, lol the documentation is horrible...

awesec wrote:You could upload your program to a one-click hoster such as Rapidshare, Megaupload, and the like. This might get you more feedback.

Thanx awesec, I intended to ask some of the EHN users to try it out first, I intend to become one myself after varsity, then collage. I might one day though, once I've received enough info to put it out there.

Anquilas wrote:I've looked at jpcap a while ago for a project in my corp, but it is idd far from perfect. Most of all: no decent 64bit system support (which is needed here)
I've been using jNetPcap to some degree of success though. It's a bit more complex then jpcap I think but it does have the advantage of being under active development.
http://jnetpcap.com/

Not sure if it's useful info, but just to make sure :)

Thanx so much Anquilas, it seems very intresting :) I will be writing exams soon, and maybe I'll fiddle with that a bit.
<<

Xen

User avatar

Sr. Member
Sr. Member

Posts: 386

Joined: Tue Feb 03, 2009 3:59 am

Post Wed Jul 28, 2010 1:11 am

Re: Amateur Networking Tool 'NETFind'

Anquilas wrote:I know you didn't m8, I was basicly agreeing with you ;)

My post was intended for the OP ;)

Return to Network Pen Testing

Who is online

Users browsing this forum: No registered users and 2 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software