PL - Masscan http://pierre.droids-corp.org/blog/html/ Mon SYN, tu l'aimes et tu l'acquittes en-us Tue, 25 Oct 2016 00:00:00 +0200 http://pierre.droids-corp.org/blog/html/2016/10/25/ivre_screenshot_all_the_things.html http://pierre.droids-corp.org/blog/html/2016/10/25/ivre_screenshot_all_the_things.html <![CDATA[IVRE: screenshot all the things!]]> IVRE: screenshot all the things!
The title of this blog comes from a nice article from 2014 named Scan Internet and Screenshot all the things

Some people have been asking us how the screenshots published with the Internet-wide Modbus scan had been taken.

Truth is, there was nothing to be proud of, and nothing worth publishing. As an example, I used a PhantomJS script to screenshot a Web-based RDP client…

But there are some great news: four Nmap scripts are now integrated to IVRE to take screenshots, and handle four different protocols.

Read more...

]]>
Tue, 25 Oct 2016 00:00:00 +0200
http://pierre.droids-corp.org/blog/html/2019/06/25/ivre_v0_9_13_release.html http://pierre.droids-corp.org/blog/html/2019/06/25/ivre_v0_9_13_release.html <![CDATA[IVRE v0.9.13 release]]> IVRE v0.9.13 release

IVRE version 0.9.13 has been released, and is available on Github, PyPI and AUR.

Changelog

The most notable changes since version 0.9.12 include:

  • Support for JA3 fingerprints and User-Agent values in view (Vincent Ruello)
  • IPv6 support:
    • in utils.get_addr_type() (Vivien Venuti)
    • DNS (AAAA) answers in passive (Angélique Baille)
  • Support DNS blacklist answers in passive (Marion Lafon)

Read more...

]]>
Tue, 25 Jun 2019 00:00:00 +0200
http://pierre.droids-corp.org/blog/html/2020/04/25/ivre_v0_9_15_lcokdown_release.html http://pierre.droids-corp.org/blog/html/2020/04/25/ivre_v0_9_15_lcokdown_release.html <![CDATA[IVRE v0.9.15 ‘lockdown’ release]]> IVRE v0.9.15 ‘lockdown’ release

IVRE version 0.9.15 has just been released (seven months after version 0.9.14), and is available on Github, PyPI and AUR.

Thanks a lot to the contributors!

Changelog

The most notable changes since version 0.9.14 include:

  • Support for ZGrab2 (HTTP) & ZDNS results.
  • Improve Masscan integration (particularly with IVRE’s fork).
  • Improve Nmap fingerprints handling (for Masscan & Zgrab2 results).
  • Handle MAC addresses (in nmap, view and passive purposes).
  • Add TinyDB support (you can test IVRE without a database server!).
  • Add ivre auditdom tool (AXFR tests).

Read more...

]]>
Sat, 25 Apr 2020 00:00:00 +0200