Multiple Zombie Idle Scan module

[satandyh]

Hi, in whole internet that I searched before I don't found any realisation of Idle Scan using more than one zombie host. For me this theme new. I think that it effective. Please create some module for this functional. Or help me to try create it. Thank for any Your answer.

[trimstray]

A good idea! Can you send faqs/manuals and other that accurately describe this scanning technique? Thanks a lot.

[satandyh]

Ok. Here are the official manual page from nmap. Inside complete information about this technique.

After reading You can see that nmap do this scan using only one zombie host. My idea is to use multiple zombies against one target host. Each zombie in this way will use separate port range (for example, 1st zombie - 1:10000, 2nd - 10001:20000, 3rd - 20001:30000, etc) for scan target. To achieve this I see only one way: to start nmap multiple times with different options. Next step is parse results from all nmap processes to one file/window/etc.

Something like this. Of course there may be several pitfalls in nmap itself. But anyway I believe that it possible.

[trimstray]

Thanks. I am studying this.