Re: Getting a Machines Uptime Remotely

From: Bojan Zdrnja (bojan.zdrnja@gmail.com)
Date: Thu Feb 02 2006 - 17:08:37 EST


Hi Robert,

On 2/2/06, Holstein, Robert - BLS CTR <Holstein.Robert@bls.gov> wrote:
> Hi,
>
> I'm trying to figure out how to get the uptime of a Win* machine
> remotely using NMAP. Stealth is not a concern. I've done it with *nix
> based OS'es before using NMAP but never Windows. Can anyone offer some
> advice on how to do this using NMAP. I've tried a couple different
> things with no results.

If I remember correctly, you can't do it with remote Windows machines
because Windows sends 0 TCP timestamps in SYN/ACK packets; you have do
an ACK for the connection and then wait for an ordinary packet to get
the proper TCP timestamp option.

Cheers,

Bojan

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:26 EDT