Comments on: Security Tip: Avoid Detection with nmap Port Scan Decoys

By: JD

JD — Wed, 08 Jun 2011 22:14:20 +0000

Just worth noting that decoy scans (-D) do work with version detection (-sV).

By: farhang

farhang — Tue, 10 Feb 2009 07:24:19 +0000

dear sir
please learn me perfect hide ip from software or network.
thanks a lot for attention

By: Sir Henry

Sir Henry — Wed, 09 Jan 2008 02:46:51 +0000

When I first found out about the decoy option in nmap, I, too, thought it would be a good way to obfuscate my scans. Unfortunately, the simple way to be defeated in the process of hiding your IP during the scan is to user etherape. You should try this out with the visual network map. It points directly to the device that is sending the most traffic. Now, if you could make the nmap scan distributed amongst the decoys, that would be impressive.