News for hackers. Stuff that matters.

A comment on Find and analyze any reachable server and device on the internet. Parent comment

Re:Find and analyze any reachable server and device on the i... by gravypod on Thursday January 25, 2018 @11:43PM (#16237078)
You can likely take every public IP your organization has, run it through that, and see what your attack surface looks like. Very useful if you have an unmanageable and public computer network.
[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by cm2187 on Thursday January 25, 2018 @11:45PM (#16237082)
Isn't that something nmap does for free?
[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by gravypod on Thursday January 25, 2018 @11:51PM (#16237106)
Not for wan which is where most commercial firewalls will do their magic.

To do this on wan you need to run zmap which is considered mean.

[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by ngharo on Thursday January 25, 2018 @11:57PM (#16237124)
Huh. nmap cares not about wan vs lan.
[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by tastythrowaway on Friday January 26, 2018 @12:36AM (#16237239)
You're correct, but i think it's that zmap scans way, way faster than nmap
[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by tokenizerrr on Friday January 26, 2018 @07:55AM (#16238756)
Running software against my own IP space is considered mean?
[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by fredsted on Friday January 26, 2018 @01:46AM (#16237452)
There's no problem running nmap on WAN
[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by matte_black on Friday January 26, 2018 @01:46PM (#16241764)
So is this product overvalued?
[ Parent | on HN ]
Re:Find and analyze any reachable server and device on the i... by fredsted on Saturday January 27, 2018 @09:45AM (#16246375)
Censys? Probably not. It depends how much you value having the data provided in an easily digestible and searchable form that's hopefully updated often.

On the other hand, if you have a small subnet, say, less than a /24, you might as well just nmap it yourself, and then you're also guaranteed to have the latest possible scan.

[ Parent | on HN ]