Scan local network for hostnames - Revision history

Pio2pio: Pio2pio moved page Linux display hostnames on local network to Scan local network for hostnames without leaving a redirect: Better description

2020-06-11T12:25:11Z

Pio2pio moved page Linux display hostnames on local network to Scan local network for hostnames without leaving a redirect: Better description

← Older revision	Revision as of 14:25, 11 June 2020
(No difference)

Pio2pio: /* arp-scan */

2015-01-24T18:29:33Z

arp-scan

← Older revision		Revision as of 20:29, 24 January 2015
Line 1:		Line 1:
			= nslookup =
			nslookup 192.168.1.64
			Server: 127.0.1.1
			Address: 127.0.1.1#53

			64.1.168.192.in-addr.arpa name = quasimodo.lan.

	= arp-scan =		= arp-scan =
	'''sudo arp-scan -l -I wlan0'''		'''sudo arp-scan -l -I wlan0'''

Pio2pio: /* nbtscan */

2015-01-24T18:19:13Z

nbtscan

← Older revision		Revision as of 20:19, 24 January 2015
Line 17:		Line 17:
	sudo apt-get install nbtscan #installation		sudo apt-get install nbtscan #installation
	sudo nbtscan -v 192.168.1.0/24 #verbose scann, difficult to read output		sudo nbtscan -v 192.168.1.0/24 #verbose scann, difficult to read output
	sudo nbtscan 192.168.1.0/24		'''sudo nbtscan 192.168.1.0/24'''

	Doing NBT name scan for addresses from 192.168.1.0/24		Doing NBT name scan for addresses from 192.168.1.0/24

Pio2pio: /* Researching */

2015-01-24T18:18:03Z

Researching

@@ Line 13: / Line 13: @@
 packets received by filter, 0 packets dropped by kernel
 Ending arp-scan 1.8.1: 128 hosts scanned in 1.315 seconds (97.34 hosts/sec). 7 responded
 = Researching =

Pio2pio: /* arp-scan */

2015-01-24T18:10:36Z

arp-scan

← Older revision		Revision as of 20:10, 24 January 2015
Line 2:		Line 2:
	'''sudo arp-scan -l -I wlan0'''		'''sudo arp-scan -l -I wlan0'''
	Interface: wlan0, datalink type: EN10MB (Ethernet)		Interface: wlan0, datalink type: EN10MB (Ethernet)
	Starting arp-scan 1.8.1 with 128 hosts (http://www.nta-monitor.com/tools/arp-scan/)		Starting arp-scan 1.8.1 with 128 hosts <nowiki>(http://www.nta-monitor.com/tools/arp-scan/)</nowiki>
	10.0.99.1 c0:cc:60:29:aa:b1 (Unknown)		10.0.99.1 c0:cc:60:29:aa:b1 (Unknown)
	10.0.99.2 c0:cc:af:2b:aa:b2 (Unknown)		10.0.99.2 c0:cc:af:2b:aa:b2 (Unknown)

Pio2pio: Created page with "= arp-scan = '''sudo arp-scan -l -I wlan0''' Interface: wlan0, datalink type: EN10MB (Ethernet) Starting arp-scan 1.8.1 with 128 hosts (http://www.nta-monitor.com/tools/arp..."

2015-01-24T18:00:47Z

Created page with "= arp-scan = '''sudo arp-scan -l -I wlan0''' Interface: wlan0, datalink type: EN10MB (Ethernet) Starting arp-scan 1.8.1 with 128 hosts (http://www.nta-monitor.com/tools/arp..."

New page

= arp-scan =
'''sudo arp-scan -l -I wlan0'''
Interface: wlan0, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.8.1 with 128 hosts (http://www.nta-monitor.com/tools/arp-scan/)
10.0.99.1 c0:cc:60:29:aa:b1 (Unknown)
10.0.99.2 c0:cc:af:2b:aa:b2 (Unknown)
10.0.99.4 c0:cc:af:2b:aa:b3 (Unknown)
10.0.99.3 c0:cc:af:2b:aa:b4 (Unknown)
10.0.99.11 d4:cc:6d:a1:aa:b5 (Unknown)
10.0.99.23 d4:cc:6d:a2:aa:b6 (Unknown)
10.0.99.100 f8:cc:ea:f9:aa:b7 (Unknown)

8 packets received by filter, 0 packets dropped by kernel
Ending arp-scan 1.8.1: 128 hosts scanned in 1.315 seconds (97.34 hosts/sec). 7 responded

= Researching =
*[http://chentiangemalc.wordpress.com/2011/02/16/using-smb-sniffing-to-determine-targets-host-name-domain-os-version-system-time-and-time-zone/ Using SMB sniffing to determine target’s host name, domain, OS version, system time and time zone]
*[http://www.cisco-faq.com/1000/home.html Cisco FAQ - blog]
*[http://pentestlab.wordpress.com/2012/08/19/scanning-netbios/ Scanning NetBIOS]