Jump to content

How to make TCP Idle Scan


zeys
 Share

Recommended Posts

Hello,

I want to do a TCP idle scan with metasploit & nmap

But I keep having a problem with Metasploit. Here is what I do and the error I get.

msf > use auxiliary/scanner/ip/ipidseq

msf auxiliary(ipidseq) > set RHOSTS 192.168.1.0/24
RHOSTS => 192.168.1.0/24
msf auxiliary(ipidseq) > set THREADS 50
THREADS => 50
msf auxiliary(ipidseq) > run
usbmon1: ERROR while getting interface flags: No such device
[-] Auxiliary failed: RuntimeError invalid bpf filter
[-] Call stack:
[-] /opt/metasploit/msf3/lib/msf/core/exploit/capture.rb:113:in `setfilter'
[-] /opt/metasploit/msf3/lib/msf/core/exploit/capture.rb:113:in `open_pcap'
[-] /opt/metasploit/msf3/modules/auxiliary/scanner/ip/ipidseq.rb:60:in `run_host'
[-] /opt/metasploit/msf3/lib/msf/core/auxiliary/scanner.rb:94:in `block in run'
[-] /opt/metasploit/msf3/lib/msf/core/thread_manager.rb:100:in `call'
[-] /opt/metasploit/msf3/lib/msf/core/thread_manager.rb:100:in `block in spawn
At this point I have no clue what to do. I have searched for a solution for two hours straight now and found nothing.
Thanks ahead of time.
Link to comment
Share on other sites

Don't you need to set a LHOST for this to work as wll? Refardless of interface, you need an LHOST IP set or set to 0.0.0.0 as a listener locally so that any open interface would see it, no? Don't know what usbmon1 is but I don't see a LHOST set in the above commands, try showing the options to see what it required.

http://www.offensive-security.com/metasploit-unleashed/Msfconsole_Commands#setg

http://www.offensive-security.com/metasploit-unleashed/Msfconsole_Commands#options

Link to comment
Share on other sites

if that's the case you can also do a setg to set your selection as the default

Looks like we posted at the same time..lol

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...