Port Scanning Through the Tor Network

Port scanning is probably one of the first steps which a hacker would take to understand this target system better. However, running an aggressive scan using Nmap not only reveals the source IP address of the hacker, but also might lead to the hacker's IP getting dynamically banned. Thus using our own IP address to do a port scan might not be the best way to go. It would more advisable to get your hands on "disposable" IP addresses and use them as sources for the scans.

In this video created by John Strand of Pauldotcom, we learn how to conduct a port scan using the Tor network. John uses Tor, Privoxy, Proxychains, Tortunnel and Nmap for this demo. A detailed blog post is available on their site for your consumption.

Vivek Ramachandran is a security evangelist and has been working in computer security related fields for the past 7 years. In 2007, Vivek spoke at world renowned conferences Defcon (WEP Cloaking Exposed) and Toorcon (The Caffe Latte Attack). The discovery of the Caffe Latte Attack was covered by CBS5 news, BBC online, Network World etc news agencies.In 2006, Vivek was announced as one of winners of the Microsoft Security Shootout contest held in India among 65,000 participants. He has also been a recipient of a Team Achievement at Cisco Systems for his work on 802.1x and Port Security modules on the Catalyst 6500 switches. Currently he spends all of his time maintaining Security- Freak.Net , SecurityTube.Net and is the co-founder of Axonize. Vivek, is a Bachelor in Electronics and Communications Engineering from the prestigious Indian Institute of Technology, Guwahati.You can contact him at vivek[at]securitytube.net