Accuracy

[XAR2012]

I tried mutiple IPs with different connection, however not sigle time its able to find any port.

Environment:

• Kali linux 2020
• 200 MBPS connection

[XAR2012]

and have manually verified that some ports are open and functioning correctly

[d0nutptr]

Hey thanks for the ticket. I definitely need more information than “do more accuracy”.

do you have an example of one of these ip addresses and expected open ports?

How fast were you trying to go (default speed?)?

Is this a virtual machine or running on the host machine?

thanks. The more information you can provide (especially the first item) the more likely I can help you.

[XAR2012]

Hey,

Thanks for the response.

“do more accuracy?"

-> Even tho ports are open its not detecting them.

do you have an example of one of these ip addresses and expected open ports?

-> So I simply tried to scan my router, which has port 80 open. But then I tried some of the bounty targets where on port 80 and 443 HTTP there and pages are loading, armada is still showing no open ports.

How fast were you trying to go (default speed?)?

-> No tweaking, ran it on dfault speed.

Is this a virtual machine or running on the host machine?

Tried on both. Vm= Kali, Host: Windows 10

And thanks for your efforts and great tools :)

[d0nutptr]

That's interesting.. This weekend I'll open a kali vm up and see if there are troubles with that. It not working on Windows doesn't surprise me too much, honestly, as I built this to specifically work on Linux, but since it's a problem on your kali as well I wonder if it being a VM is interfering somehow or, perhaps, something with your specific network that is causing a problem. I've heard that it works on Windows for others so whatever the issue is might be the issue for both Windows and Kali here.

Questions that could help me

• Which bug bounty target did you scan and fail to detect ports 80 and 443?

• Have you been able to find any ports on any target with armada? Or is it just failing for some targets?

[XAR2012]

Hey,

So the time I was scanning, I was able to scan open ports for my router, but the internet IPs's ports were not scannable.

Which bug bounty target did you scan and fail to detect ports 80 and 443?

Actually, It was a private target. So won't be able to say that.

 Have you been able to find any ports on any target with armada? Or is it just failing for some targets?

TBH, no I wasn't able to. None of the IPs(tried 7-8 of them), and I had verified that they had ports OPEN, but armada wasn't able to pick it up.

Please see the following screenshot

[d0nutptr]

Thanks for the IP to test against. I’ll check this later when I’m home. It’s suspicious that you have been unable to see ports on any IP address.

can you attempt to port scan 8.8.8.8 (google dns) and see if you get any results? Three ports should be open. If it fails then there are two possibilities in my mind.

thanks!

[XAR2012]

Hey,

No luck on 8.8.8.8.

[XAR2012]

Hey D0nut,

To add more info, same thing happens on Ubuntu 20 Vm.

[d0nutptr]

Thanks for the additional info! Definitely seems to be something to do with running armada inside a vm. I’ll look saturday

[d0nutptr]

Heyo! I haven't actually checked this myself but a different user had discovered a bug where armada was sending up some extra bytes in the packet which caused some systems to not respond properly. I've patched armada with this commit

c78ef98

Can you try with the very latest version of Armada and let me know if this fixed your issue? Otherwise I'll pull a VM down and try it myself.

Thanks!

[TarasZelyk]

Hi @d0nutptr,
I have the same problem as @XAR2012
I just tried Armada 1.0.1, which includes the patch, and it's still not able to find open ports for 8.8.8.8. I am using Ubuntu 20 on my host machine. Let me know what additional details you may need to reproduce the issue.

[d0nutptr]

Ahh thanks for the info. I'll open Virtualbox right now and get a VM going. Thanks for the information :)

[d0nutptr]

Hello @TarasZelyk!

I ended up pulling Ubuntu 20.04 iso down and creating an Ubuntu 20.04 virtual machine via an up-to-date virtualbox (my host machine is also Ubuntu 20.04).

After making sure the machine was up-to-date, armada installed and given CAP_NET_RAW, I was able to successfully port scan remote targets.

Would you be able to give me reproduction steps (starting from scratch) on how to build a VM that does not port scan properly?

Thanks!

[XAR2012]

Hey Man,

Have updated as directed still seeing inconsistent results.

[d0nutptr]

Wait... I thought you said you weren't getting any results? I see you actually saw a port when you scanned the first time.

You're just port scanning too fast for your connection.

Armada, by default, has a rate limit of 10,000 packets each second, which works relatively well for ethernet connected, high speed connections; however, you may be on a less reliable connection (which has nothing to do with MBps). You may need to slow armada down. I recommend you try the following as a simple test:

armada 8.8.8.8 -p 1-1000 --rate-limit 100

See if this works for you and let me know. If it does, then you should play around with the rate-limit number a few more times and see if it improves.