掃 port 的工具 – unicornscan – 類似NMAP

unicornscan – http://www.unicornscan.org/

它是一個 類似 NMAP 的工具，聽說它用來掃UDP比nmap好用

下載

wget http://unicornscan.org/releases/unicornscan-0.4.7-2.tar.bz2

安裝  在  Centos 6 x64

./configure;make ;make install

但是make時遇到

socktrans.c: In function ‘socktrans_accept’:
socktrans.c:192: error: storage size of ‘ccred’ isn’t known
gmake[2]: *** [socktrans.lo] Error 1
gmake[2]: Leaving directory `/root/unicornscan-0.4.7/src/unilib’
gmake[1]: *** [alld] Error 1
gmake[1]: Leaving directory `/root/unicornscan-0.4.7/src’
make: *** [all] Error 1

 

解決方式

./configure CFLAGS=-D_GNU_SOURCE

不過又遇到

gmake[2]: bison: Command not found
gmake[2]: *** [parse.tab.c] Error 127
gmake[2]: Leaving directory `/root/unicornscan-0.4.7/src/parse’
gmake[1]: *** [alld] Error 1
gmake[1]: Leaving directory `/root/unicornscan-0.4.7/src’
make: *** [all] Error 1

解決方式

yum install bison

簡單用法

unicornscan 10.10.10.138

TCP open smtp[ 25] from 10.10.10.138 ttl 128
TCP open http[ 80] from 10.10.10.138 ttl 128
TCP open pop3[ 110] from 10.10.10.138 ttl 128
TCP open epmap[ 135] from 10.10.10.138 ttl 128
TCP open imap[ 143] from 10.10.10.138 ttl 128
TCP open https[ 443] from 10.10.10.138 ttl 128
TCP open microsoft-ds[ 445] from 10.10.10.138 ttl 128
TCP open ms-wbt-server[ 3389] from 10.10.10.138 ttl 128

而 NMAP 10.10.10.138反而是

Nmap scan report for 10.10.10.138
Host is up (0.00073s latency).
Not shown: 989 filtered ports
PORT STATE SERVICE
25/tcp open smtp
80/tcp open http
110/tcp open pop3
135/tcp open msrpc
143/tcp open imap
443/tcp open https
445/tcp open microsoft-ds
2179/tcp open vmrdp
3389/tcp open ms-term-serv
8443/tcp open https-alt
49154/tcp open unknown

8443 是確實有listen的，但unicornscan沒有掃出來!! 怪

再來測試udp，是怎麼了 unicornscan 掃沒有

算了，這只是個工具，只是個測試

以上

參考 : http://www.aldeid.com/wiki/Unicornscan