I l@ve RuBoard Previous Section Next Section

12.7 What's running

URL: www.woodstone.nu/whats

Client OS: Windows 9x/NT

Target OS: IP systems

Classification: Discovery tool

Price: Free

Description:  What's running is a banner-grabbing program that runs on Windows 9x/NT. Once you have identified services that are running through the use of port scanners, you can use this program to determine what versions of the services are running. By knowing the versions of the services, you can search for vulnerabilities related to those specific versions and tailor your attacks on those services.

Use:  What's running is simple to install and use. Simply launch What's running and use the GUI. Enter the host name or IP address in the appropriate window and select the service to which you wish to connect. The option titled Other can be used to test services that are not listed simply by typing the port number in the window. Once the program connects to the service, What's running displays the service and version information in the output window if any information is available.

Benefits:  What's running is free and simple to use. It captures banner information that contains software version information that can be used to develop specific attacks against services.

Con:  The tool does not offer any utility other than banner grabbing.

I l@ve RuBoard Previous Section Next Section