Scanning and Checking NTP Amps - Checker Included! 03-13-2014, 02:52 AM
#1
Introduction
Hello, today I will be teaching all of you how to scan and check NTP v2 servers. I'm going to try to be as thorough as possible, while keeping it sane. I will be showing you multiple ways of scanning and how to use my checker I promised to release in my last thread. Not sure what i'm talking about? Read my other thread here.
Scanning
Masscan
1. Download here
2. Follow the installation instructions on the github page.
3. Navigate to the bin folder.
4. Execute "./masscan -p123 0.0.0.0/0 --exclude 255.255.255.255 -oG output.txt --rate=(100mbit line, 100 thousand, 1gbit = 1 million)"
5. Execute "cat output.txt | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' > filtered.txt"
6. Execute "rm output.txt"
7. (OPTIONAL) To check the size of your list execute "wc -l filtered.txt"
8. You are now ready to start checking for response sizes!
Checking
1. Download my checker here.
2. Unzip
3. Execute "java -jar LulzChecker.jar filtered.txt 1 1"
4. All servers with an amp ratio higher than 1 will be saved to filtered.txt.cipher with the ip and amp ratio next to them.
5. Now we filter out all the bad servers by executing "cat input.txt | awk '{if($2 > <ratio>){print $1}}' | sort -u > good.txt"
Hello, today I will be teaching all of you how to scan and check NTP v2 servers. I'm going to try to be as thorough as possible, while keeping it sane. I will be showing you multiple ways of scanning and how to use my checker I promised to release in my last thread. Not sure what i'm talking about? Read my other thread here.
Scanning
Masscan
1. Download here
2. Follow the installation instructions on the github page.
3. Navigate to the bin folder.
4. Execute "./masscan -p123 0.0.0.0/0 --exclude 255.255.255.255 -oG output.txt --rate=(100mbit line, 100 thousand, 1gbit = 1 million)"
5. Execute "cat output.txt | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' > filtered.txt"
6. Execute "rm output.txt"
7. (OPTIONAL) To check the size of your list execute "wc -l filtered.txt"
8. You are now ready to start checking for response sizes!
Checking
1. Download my checker here.
2. Unzip
3. Execute "java -jar LulzChecker.jar filtered.txt 1 1"
4. All servers with an amp ratio higher than 1 will be saved to filtered.txt.cipher with the ip and amp ratio next to them.
5. Now we filter out all the bad servers by executing "cat input.txt | awk '{if($2 > <ratio>){print $1}}' | sort -u > good.txt"