Comments on: p0f – Advanced Passive OS Fingerprinting Tool

By: razta

razta — Mon, 03 Nov 2008 00:42:51 +0000

IronGeek made an app for windows which apparetly in most cases cloaks OS fingerprinting. Looks like its quite affective against p0f, and im sure you can edit the TCP/IP in Linux with out the help of any apps. However its quite a cool concept and apparetly works.

http://www.irongeek.com/i.php?page=security/osfuscate-change-your-windows-os-tcp-ip-fingerprint-to-confuse-p0f-networkminer-ettercap-nmap-and-other-os-detection-tools

By: backbone

backbone — Tue, 28 Oct 2008 01:28:03 +0000

@Pentagruel:
swiss army knife – netcat
nmap – John Rambos knife :)

By: akito85

akito85 — Mon, 27 Oct 2008 23:55:53 +0000

i’ve never heard about this tool before im gonna give a try to this new knife :P

thanks for the info

By: Pantagruel

Pantagruel — Sat, 25 Oct 2008 09:49:09 +0000

Indeed funny you never coverd p0f before, it did get mentioned a few times in other posts.

p0f appears to be more of a tooth pick compared to the swiss army knife Nmap ;)

By: navin

navin — Tue, 14 Oct 2008 21:41:11 +0000

“absofuckinglutely.” -Adding tht to my list of “favoritest” words!!

By: Lepht

Lepht — Tue, 14 Oct 2008 15:36:52 +0000

“It’s like Robin when Nmap is Batman”

absofuckinglutely.

By: elpeor

elpeor — Mon, 13 Oct 2008 15:46:52 +0000

It is nice, I just run it in eth0 with mldonkey working and I get all OS of all connections..
It gets 99% of OS guess, just some does not know what OS they use.
funny!

By: navin

navin — Mon, 13 Oct 2008 14:04:03 +0000

Nice!! esp the agility and size (windows version is only 58 KB in size!!) It’s like Robin when nmap is Batman