From: Hans (hans.ullrich@loop.de)
Date: Sun Mar 12 2006 - 14:08:41 EST
Am Sonntag, 12. März 2006 10:59 schrieb Mohamed Abdel Kader:
> Hello pen-testers,
>
> I was wondering what are the required changes to the TCP/IP stack to make
> nmap report the OS as Linux instead of Windows. A simple example would be
> to changing the TTL value from the default windows 128 to 64 through the
> registry.
>
>
>
> Any other accessible ideas?
>
>
Hi Mohamed !
Maybe you should try DTK (Deception Tool Kit). This is a tool, which fakes the
answers of portscans to wrong OS. I do not know, where to find it, but I
think, Google will help.
DTK is under the GPL.
Best regards
Hans
>
> Thanks in advance!
>
> ---------------------------------------------------------------------------
>--- This List Sponsored by: Cenzic
>
> Concerned about Web Application Security?
> As attacks through web applications continue to rise, you need to
> proactively protect your applications from hackers. Cenzic has the most
> comprehensive solutions to meet your application security penetration
> testing and vulnerability management needs. You have an option to go with a
> managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic
> Hailstorm). Download FREE whitepaper on how a managed service can help you:
> http://www.cenzic.com/news_events/wpappsec.php
> And, now for a limited time we can do a FREE audit for you to confirm your
> results from other product. Contact us at request@cenzic.com
> ---------------------------------------------------------------------------
>---
-- Firma Ullrich-IT-Consult Inh.: Hans-J. Ullrich Münstedter Weg 10 31246 Oberg Tel.: 0160 8156 079 www: http://www.ullrich-it.de Linux-Beratung für Server und Clients * IT-Sicherheit * Seminare und Workshops ------------------------------------------------------------------------------ This List Sponsored by: Cenzic Concerned about Web Application Security? As attacks through web applications continue to rise, you need to proactively protect your applications from hackers. Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. You have an option to go with a managed service (Cenzic ClickToSecure) or an enterprise software (Cenzic Hailstorm). Download FREE whitepaper on how a managed service can help you: http://www.cenzic.com/news_events/wpappsec.php And, now for a limited time we can do a FREE audit for you to confirm your results from other product. Contact us at request@cenzic.com ------------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:40 EDT