Index_N

---

N

name servers, 413, 417

NASL (Nessus Attack Scripting Language), 303

NAT (Network Address Translation)

firewalls and, 368-371, 409

ipchains, 383

IPFW, 403

iptables, 391-393

overview, 368-371

port scanning and, 71

Navigator, 715-719, 738-739

NBT (NetBIOS-over-TCP), 131, 136

NBT traffic, 136

nbtstat command, 133-137, 583

NBTSTAT tool, 133-137

nc. See Netcat

NDIS3Pkt key, 233

Nemesis utility, 562-564

Nessus Attack Scripting Language (NASL), 303

Nessus security scanner, 302-318, 358-359

.NET Secure Coding Guidelines, 300

NET tools, 129-133

net type qualifiers, 470

net use command, 132-133

net user command, 140-141

net view command, 131

NetBIOS

connections, 133-137, 583

enumeration, 114-115

names, 133-136, 583

NBTSTAT and, 133-137

routing and, 136

NetBIOS codes, 136-137

NetBIOS-over-TCP (NBT), 131, 136

NetBIOS ports, 146, 154, 160-161

NetBIOS protocol, 583

Netbus, 261-265, 287

Netcat, 4-25

as alternative to inetd, 190

bypassing port filters, 20

command line, 6-9

custom scripts, 25

datapipes, 21-23

Denial-of-Service attacks, 23-24

FTP and, 21-23

hijacking services, 18-20

installing, 5-6

IP spoofing, 17-18

obtaining, 4-5

options, 6-9

port scanning, 12-16, 64

proxies, 20

relays, 20

as remote detonator, 23-24

remote shell access, 9-12

setting traps, 24

testing network equipment, 24

UDP services communication, 16-17

uses for, 9-25

Windows and, 6, 9-12

netfilter, 383-393

Netgroup Packet Filter service, 466

nethide tool, 284-285

NetScanner tab, 91

NetScanTools, 90-94

Netscape Communicator

e-mail reconstruction, 715-719, 738-739

web browser files, 732

Netscape Messenger program, 719

Netscape Navigator, 715-719, 738-739

NetScreen firewalls, 410

netstat command

remote access to shell, 10-11

Unix live response tool kit, 600-601

Windows live response tool kit, 580-583, 598

NetStumbler tool, 515-517

Network Address Translation. See NAT

network address translation (NET), 71

network connections, 284-285

Network File System. See NFS

Network Information System (NIS), 115, 117

network interface cards (NICs), 42, 99

network mapper. See nmap

Network Neighborhood, 112, 128-129

network reconnaissance, 411-438

fping tool, 423-426

host/dig/lookup utilities, 417-420

hping program, 430-438

Ping tool, 420-423

traceroute tool, 426-430

whois/fwhois commands, 412-416

networks

DMZ, 514

Ethernet, 454

ICQ, 272

IRC, 272

LANs, 454

mapping, 80-84

My Network Places, 112, 128-129

Netcat and, 24

Network Neighborhood, 112, 128-129

switched, 455

testing, 24

Windows tools, 129-133

wireless, 513-530

NFS (Network File System), 115-117

NFS servers, 117-118

NFS traffic, 493

NICs (network interface cards), 42, 99

nikto scanner, 170-177

NIS (Network Information System), 115, 117

nmap front end (nmapfe), 79-84

nmap (network mapper) utility, 64-90

command-line option summary, 76-78

hiding scans, 70-73

Netcat and, 9

nmapfe, 79-84

overview, 64-65

scanning for hosts, 65-66

scanning for TCP ports, 66-69

scanning for UDP ports, 69-70

timing scans, 73-74

version detection, 75-76, 85

nmapfe (nmap front end), 79-84

nmblookup, 114-115

noerror parameter, 654

NoLMHash value, 232

norunc parameter, 654

NSA guidelines, 244

nslookup utility, 417-420

NT Domain network type, 138

NTLast tool, 590

NULL connections, 128

null scans, 68

NULL sessions, 128

NULL shares, 142

---