WUPS

---

WUPS is a simple but effective UDP scanner for Windows with a graphical interface. Written by Arne Vidstrom, the same person who wrote IPEye, it is available for download at http://ntsecurity.nu/toolbox/wups/.

Implementation

One nice thing about WUPS is that it has a graphical interface, as shown in Figure 4-11. As with other UDP scanners, packet filters that filter out “port unreachable” messages and the like can return a lot of false positives for the scan. Another drawback of WUPS is that it can handle only one IP address at a time. In Figure 4-11, we performed a UDP scan on 192.168.1.101 from ports 1–1024 with a delay of 100 milliseconds between port probes. We can guess that 192.168.1.101 is a Windows box because services were running on ports 137 and 138 (NetBIOS) as well as 445 (SMB over IP, also referred to as the Microsoft-DS service).

Figure 4-11: WUPS sample screen

---