Joe Sarkisian USES Masscan
Joe's junior tester used Masscan for a port scan during a bank penetration test.
Explicit Confidence 99% · Joe Sarkisian EP 149 Details
“I always use Masscan”
Tool
tool:masscan
High-speed port-scanning tool whose excessive packet rate caused a bank network to become unavailable during a penetration test.
High-speed port-scanning tool whose excessive packet rate caused a bank network to become unavailable during a penetration test.
“I always use Masscan”
“Masscan’s faster”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | network switch | Uncertain | 149 |
| outgoing | AFFECTS | router | Uncertain | 149 |
| outgoing | AFFECTS | firewall | Uncertain | 149 |
| incoming | USES | Joe Sarkisian | Explicit | 149 |
Joe Sarkisian USES Masscan
Joe's junior tester used Masscan for a port scan during a bank penetration test.
Explicit Confidence 99% · Joe Sarkisian EP 149 Details
“I always use Masscan”
Masscan AFFECTS network switch
Jack speculates that the excessive Masscan traffic could overwhelm a network switch and cause a denial-of-service effect; the specific affected device is not confirmed.
Uncertain Confidence 78% · Jack Rhysider EP 149 Details
“it could easily overwhelm that next hop”
Jack speculates that excessive Masscan traffic could overwhelm a router and prevent other traffic from passing; the specific affected device is not confirmed.
Uncertain Confidence 72% · Jack Rhysider EP 149 Details
“if it was a switch or a router”
Jack speculates that scanning external IPs could overload the firewall or consume the site's internet bandwidth; this is presented as one possible explanation.
Uncertain Confidence 76% · Jack Rhysider EP 149 Details
“the traffic might have traversed the firewall”