PortBunny

Watched the video recording of Recurity Labs presentation on PortBunny during the 24th CCC. I've been involved with Nmap for over 2 years and I have to admit that the presentation did push me to the edge of my seat initially. Their points are well constructed and the graphs did show a contrast of things. At the end of the presentation, I realized that they were emphasizing on the speed aspect whilst sidestepping the accuracy aspect which IS A BIG DEAL. Sure Nmap takes 12 minutes, 18 seconds whilst PortBunny took 15 seconds to scan. That is an average of 4,369 probes per second. Nmap can scan that fast too if you remove congestion control and toss out the idea of accuracy. Though i do agree that Nmap's timing-code algorithm which is still based on TCP-RENO is from the 80's needs a long deserved overhaul.

Fyodor's response
PortBunny Project Page

"PortBunny is a Linux-kernel-based port-scanner created by Recurity Labs. Its aim is to provide a reliable and fast TCP-SYN-port-scanner which performs sophisticated timing based on the use of so called "trigger"-packets. The port-scan is performed in 2 steps: First the scanner tries to find packets, to which the target responds ("triggers"). Second, the actual port-scan is performed. During the scan, the triggers, which were found in the first scanning-phase, are used to determine the optimal speed at which the target may be scanned."

Intel Wireless Adapter MAC Addresses Changer

A while back when i was serious about WarDriving, I was constantly using both my built-in IPW2200 and the Alfa wireless adapter. On *nix env, ifconfig $INTERFACE hw ether $ADDRESS would be sufficient enough. I was having issues with the RTL8187 driver on Gentoo at that time and resorted to WarDriving on Windows. The only alternative for the Windows platform available was a tool called SMAC from the guys at klcconsulting. Unfortunately, to seriously use this software you'd have to pay for it. As any random disgruntled individual would do, I whipped up my own tool.

Macchanger is a Windows based command line tool to change the MAC address of Intel based wireless adapters. It was coded in C++ and the program can be downloaded from here. Development for it stopped with it's basic features. It also has been patched for use in Windows Vista(thanks to Hazwan for informing me about the bug). If there is a substantial demand or interest in this tool, I may implement a MAC address randomization feature(notice option 5?). Do take note that the wireless adapter has to be switched on for it to function.