______ _ | ___ \ | The 11010010100 | |_/ / | __ _ __ _ _ _ ___ 11010110100 | __/| |/ _` |/ _` | | | |/ _ \ 10000110101 | | | | (_| | (_| | |_| | __/ 10100110001 \_| |_|\__,_|\__, |\__,_|\___| 00100100001 __/ | 10100100001 portscanner |___/ 10100101001 10100001000 /------------------------\ <--> The Plague Portscanner <-----------------------------------------> \------------------------/ Plague is a SYN/FIN stealth portscanner for Windows NT 5.0 and later platforms, and it is a fast one. Even though it has a GUI, someone who is not familliar with networking will eventually find it hard to configure Plague correctly - but I can't help it. Plague is my idea of a good portscanner, and that's what counts for me. If you do not like it, there is still nmap. The use of Plague constitutes the acceptance of the terms and conditions formulated in our utter .aware disclaimer: http://www.awarenetwork.org/ Plague is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. Plague is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with Plague; if not, write to The Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA /-------------\ <--> How to use <----------------------------------------------------> \-------------/ Plague was not coded for someone with zero knowledge about networking, and I will assume that you know the basics for these brief instructions. Before you perform a scan, you should configure Plague appropriately by selecting the following items from the configuration menu: - Scanner Setup - Select Interface - Choose Ports The scanner setup dialog does not require any further explanation, but you should know that it is a good idea to set the timeout manually. For a relieable value, you can use the Ping tool and send packets of about 50 bytes to the target host - if you round up the slowest reply time, you usually get a decent timeout value for the actualy scan. The interfaces on your computer are detected by using the IP Helper API. You cannot scan on local looback interfaces, but Plague will work with everything else. Some details about the interface are provided in the select interface dialog to help you with the correct choice. The choose ports dialog is the final configuration step. You have the option to scan an entire range of ports or to select a number of ports from a list. The list of ports is obtained from Plague's own services file and by right-clicking the list, you will be able to modify the enties, delete them and add new ones. After you have finished this part of the setup, you can click on File -> Perform Portscan This will pop up another dialog which will prompt you for the target computer to scan. There is a checkbutton next to the textbox which says "IP" - if you press it, you also have the opportunity to enter the IP Address of the target into an IP control. This has been added just as an option - if you enter an IP address in dotted decimal notation in the original textbox, Plague will still perform a correct scan. Below the textbox, there is an area where you can configure the multithreaded scan. Plague is also able to perform a single-threaded scan, which is more relieable but also slower than a multi-threaded one. The values for the multithreaded scan depend a lot on the interface that you are using to perform the scan. My values usually default to 4 threads and 50 simultaneously pending connections, but you might find other values to be more appropriate. After everything is done, hit the Ok button and Plague will start to scan. Once an open / filtered / closed port is found and you have setup Plague to display ports in this state, the port will be added to the list in the main window along with the state and a service description, if available. You can cancel the scan at any time by pressing [CTRL]+[X]. /--------------------------------\ <--> This program is full of bugs! <---------------------------------> \--------------------------------/ Really? Tell me about them. Use the contact info on http://www.awarenetwork.org Plague is not as user friendly as other projects I have already published, and I know that. I originally coded it for personal use, but I lateron decided to publish it on the site. Nevertheless, I will try to fix all major problems that you have while using it. /------------\ <--> That's it <-----------------------------------------------------> \------------/ I don't think there is much more to say about a simple portscanner, I hope you enjoy it and I hope the code answers the one or another question on raw socket programming in Windows. Always the real thing. ~ rattle