{"id":647,"date":"2007-12-10T09:33:46","date_gmt":"2007-12-10T09:33:46","guid":{"rendered":"https:\/\/www.darknet.org.uk\/2007\/12\/scanrand-download-stateless-tcp-scanner-with-syn-cookies\/"},"modified":"2015-09-09T19:39:45","modified_gmt":"2015-09-09T11:39:45","slug":"scanrand-download-stateless-tcp-scanner-with-syn-cookies","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2007\/12\/scanrand-download-stateless-tcp-scanner-with-syn-cookies\/","title":{"rendered":"scanrand &#8211; Download Stateless TCP Scanner with Syn Cookies"},"content":{"rendered":"<p>[ad]<\/p>\n<p>Scanrand is extremely quick and effective port scanner.   It works by forking two distinct processes:<\/p>\n<ul>\n<li>One to send the initial queries<\/li>\n<li>One to receive responses and reconcile them from the above<\/li>\n<\/ul>\n<p>This makes it extremely fast.<\/p>\n<p>If you haven&#8217;t heard of the suite, Scanrand is one of the five tools in Paketto Keiretsu by Dan &#8220;Effugas&#8221; Kaminsky of Doxpara Research.<\/p>\n<p>Scanrand implements numerous options; reasonable defaults are selected when no specific guidance is received from the user.  The only thing mandated is a target destination, which may be specified using either a FQDN(Fully Qualified Domain Name) or a numeric specification.<\/p>\n<p>These numerics may employ any number of dashes, commas, or combination thereof at the same time.  For example, scanrand 10.0.1-255.1-10,20:80,137-139 works fine.<\/p>\n<p>More ports will be scanned by default when scanning a single host than when sca<br \/>\nnning a network. Scanrand is able to estimate remote hopcount by examining incoming TTLs.<\/p>\n<p>Note please to install scanrand you need to first install the provided libnet, libtomcrypt and libpcap tarballs.<\/p>\n<p>It&#8217;s a good alternative to <a href=\"https:\/\/www.darknet.org.uk\/tag\/nmap\">nmap<\/a> for certain purposes<\/p>\n<p>You can read a good article on Scanrand here:<\/p>\n<p><a href=\"http:\/\/www.secureworks.com\/research\/articles\/scanrand\">Scanrand Dissected: A New Breed of Network Scanner<\/a><\/p>\n<p>The article includes nmap vs scanrand.<\/p>\n<p>You can download Scanrand here (as part of Paketto):<\/p>\n<p><a href=\"http:\/\/www.doxpara.com\/paketto\/paketto-1.10.tar.gz\">paketto-1.10.tar.gz<\/a><\/p>\n<p><!--adsense#New468--><\/p>\n<p>Or read more <a href=\"http:\/\/www.doxpara.com\/read.php\/docs\/scanrand_logs.html\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ad] Scanrand is extremely quick and effective port scanner. It works by forking two distinct processes: One to send the initial queries One to receive responses and reconcile them from the above This makes it extremely fast. If you haven&#8217;t heard of the suite, Scanrand is one of the five tools in Paketto Keiretsu by [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9,5],"tags":[2210,8858,247],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/647"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=647"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/647\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}