<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>ewald.tienkamp.nl &#187; Mobile</title>
	<atom:link href="http://ewald.tienkamp.nl/category/mobile/feed/" rel="self" type="application/rss+xml" />
	<link>http://ewald.tienkamp.nl</link>
	<description>Gentoo Linux and whatever else I think needs to be shot into cyberspace.</description>
	<lastBuildDate>Sat, 04 Sep 2010 08:39:02 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.4</generator>
		<item>
		<title>Scanning for Conficker using Nmap under Gentoo Linux</title>
		<link>http://ewald.tienkamp.nl/2009/05/18/scanning-for-conficker-using-nmap-under-gentoo-linux/</link>
		<comments>http://ewald.tienkamp.nl/2009/05/18/scanning-for-conficker-using-nmap-under-gentoo-linux/#comments</comments>
		<pubDate>Mon, 18 May 2009 20:53:08 +0000</pubDate>
		<dc:creator>Ewald</dc:creator>
				<category><![CDATA[Desktop]]></category>
		<category><![CDATA[Gentoo Linux]]></category>
		<category><![CDATA[Mobile]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Server]]></category>
		<category><![CDATA[blog]]></category>
		<category><![CDATA[compile]]></category>
		<category><![CDATA[Conficker]]></category>
		<category><![CDATA[emerge]]></category>
		<category><![CDATA[Google]]></category>
		<category><![CDATA[lua]]></category>
		<category><![CDATA[nmap]]></category>
		<category><![CDATA[package.use]]></category>
		<category><![CDATA[portage]]></category>
		<category><![CDATA[USE flags]]></category>

		<guid isPermaLink="false">http://ewald.tienkamp.nl/?p=8</guid>
		<description><![CDATA[Well, that was what I wanted. I know, Conficker was hot months ago. But hey, I&#8217;m not often around Windows machines and I thought that while I was, I might just as well scan my parents&#8217;s network. So there I was with my little netbook, most recent Nmap (nmap-4.85_beta8) loaded, ready to go. A quick [...]]]></description>
			<content:encoded><![CDATA[<p>Well, that was what I wanted. I know, Conficker was hot months ago. But hey, I&#8217;m not often around Windows machines and I thought that while I was, I might just as well scan my parents&#8217;s network.<br />
<span id="more-8"></span><br />
So there I was with my little netbook, most recent Nmap (nmap-4.85_beta8) loaded, ready to go. A quick Google search taught me the right command.</p>
<p>But it failed.</p>
<p><code>nmap: unrecognized option '--script'<br />
[snip: followed by regular nmap --help output]</code></p>
<p>Eh?</p>
<p>As my thinking was suspended, I went for Google to find me the culprit responsible for this error. No results. What? Ah, well, this is just why I wanted my own blog: to enhance Google with yet unknown knowledge (or knowledge previously only available in obscure languages). Now only to find the solution&#8230;</p>
<p>Turns out it was actually rather simple: compile <a href="http://www.gentoo-portage.com/net-analyzer/nmap/USE#ptabs" title="Gentoo-Portage.com - nmap USE flags">Nmap with the lua USE flag</a>. Yes, that&#8217;s all.</p>
<p><i>OPEN PACKAGE.USE</i><br />
<code>nano /etc/portage/package.use</code><br />
<i>AND INSERT</i><br />
<code>net-analyzer/nmap lua</code><br />
<i>OR ON A TERMINAL ENTER</i><br />
<code>echo "net-analyzer/nmap lua" >> /etc/portage/package.use</code></p>
<p>After this you&#8217;re good to go.</p>
<p>While I&#8217;m at it, let&#8217;s leave you with the recommended scan options at the moment of writing:</p>
<p><code>#Source: <a href="http://nmap.org/changelog.html" title="Nmap changelog">Nmap changelog</a><br />
  o Recommended command for a fast Conficker scan (combine into 1 line):<br />
    nmap -p139,445 --script p2p-conficker,smb-os-discovery,smb-check-vulns<br />
    --script-args checkconficker=1,safe=1 -T4 [target networks]<br />
  o Recommended command for a more comprehensive (but slower) scan:<br />
    nmap --script p2p-conficker,smb-os-discovery,smb-check-vulns -p-<br />
    --script-args checkall=1,safe=1 -T4 [target networks]<br />
</code></p>
]]></content:encoded>
			<wfw:commentRss>http://ewald.tienkamp.nl/2009/05/18/scanning-for-conficker-using-nmap-under-gentoo-linux/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

