OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[ISSForum] Blackout or DO SCAN LIST help

From: Holger Reichert (holger.reichertholysword.de)
Date: Mon Aug 15 2005 - 13:29:10 CDT

Hello,

I just uploaded a perl script on my website, which is able to produce a
hostfile by substracting IP-Addresses from
IP-Address Ranges.
It does not exactly work like you stated in your mail, but the result should
be correct, and you should be able to import it into Internet Scanner.
I took not the time to build ranges for the resultscan.txt again. I only
build a list of allowed IP-Addresses, but this doesn't matter for importing.

Usage:
built-hostfile.pl scanlist.txt noscanlist.txt resultscan.txt

The filenames may be chosen at your will.

Here is the download link:
www.holysword.de/Tools/perl/build-hostfile.txt

It is possible to provide multiple ranges within one scanlist.txt file.
Declare every range in a seperate line.
Do not leave a CR on the last line of scanlist.txt

But leave a CR on the last line of noscanlist.txt

Greetings

H. Reichert
Holysword GbR
IT-Security Consulting
Hamburg
Germany

I am wondering if there is a script or program that I could run that
would create a host file for use with Internet Scanner that would take a
subnet range and subtract IP addresses from a parameter file creating a
net host file.

FOR EXAMPLE: NETHOSTFILE -t scanlist.txt -d noscanlist.txt -o
resultscan.txt

where -t = targets
where -d = do not scan these targets
where -o = output file name

scanlist.txt
192.168.1.0-192.168.1.10

NOSCANLIST
192.168.1.3
192.168.1.7

resultscan.txt
192.168.1.0-192.168.1.2
192.168.1.4-192.168.1.6
192.168.1.8-192.168.1.10

I have a large number of IP's that are designated DO NOT SCAN. It would
be nice to enter like a Class B range and then have the script subtract
the IPs on the DO NOT SCAN list yielding the net target scan list.

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.