There is a wide variety of IP tools. However, there is more complete ones. I reccomend two; AGNetTools, thats the best, it can do all kinds of Queries, Whois, Fingers, Traces, DNS, Scans, and much more. But it still lacks a little customability for the pinging so if you are planning to do pingflooding, get Whatroute 1.4.3 or earlier. AGNetTools is Freeware and has the most useful features you will ever see in a IP tool, scans.
Short description of the features:
Port Scan: Will scan ports on an IP for TCP and/or UDP access. Very useful to find nukeable machines. Holes on a system, information, etc.
Service Scan: Will scan IP's from the first IP to the second IP for a port you choose. A kind of WarDialer Online ;-)
Ping Scan: Very useful if you want to find out all the machine's IPs on a network, or just look for every IP's having a certain subnet. Used to scan wide ranges networks to find online machines.
These are the features you need to know most, other features have been covered in the first IP Tools article in HackAddict‚Ñ¢ 6.
Useful Techniques:
Sometimes on IRC you will have people using a *DNS Spoofer*, this only gives you his DNS and you wont be able to get the Number IP, not letting you perform any operations on that IP. Well here is a way (there is others) to find out the number of that IP. Lets say the IP is 73POSTE118.COLLEGEBDEB.QC.CA try to do a DNS on this, you will get nothing. Now if you want only the Main server's name you will use COLLEGEBDEB.QC.CA get a DNS on this, you will get 199.202.73.235. Now everyone knows (I hope) that IP numbers are of the form 255.255.255.255 meaning the maximum number on of these four sections can be is 255. and the smallest is, of course, 0. now we will do a ping scan from IP 199.202.73.0 to IP 199.202.73.255. Now look at the bunch of IP's, you should see your 73POSTE118.COLLEGEBDEB.QC.CA with a IP number, you found your number! (The IP's used in this paragraph are EXAMPLES and shouldn't be working by the time you get this article)
Often Gateways will let you see the usernames and lines of the people connected to them only with a Finger. You will also get the idle time of a connection, useful if you want to see if the computer crashed. You may also get what kind of activity the connection is doing (Connection, PPP send, etc.). To do this, first get an IP, lets say we use 199.202.73.235. Trace that IP usually the first or second IP before the IP you traced will be the Gateway. Then, take the gateway's IP and Finger the root on it. If you are lucky you will get a nice list with all kinds of useful informations on that network.
To scan a wide range of IP's, remember not to enter a bigger number than 255 for each sections of the IP, or AGNetTools may quit. Also, remember the second node from right to left is multiplicated by 255. If the first IP has a second node of 134 and the second you scan has one of 140, you will scan 6x255 IP's, that means alot. Also, UDP scans may not be very useful, although you can use them to find pingfloodable ports. I suggest you only scan IP's on TCP this way it will be faster. Most interesting ports are on IP's 1 to 200, wingates will be on 1080 though and HL trackers on 5498. Other ports are on the Services list of AGNetTools.
 
Port scan on weasel.org using both TCP and UDP ports
If you want to Winnuke a PC, the best way is to scan his IP from TCP port 137-139, if one of these ports is open you will be able to nuke him, if not, just forget it the user is protected. If port 137 only is open, use Nuke Em on port 137. If 138 or 139, use WinnukePro 1.1.1 by Team2600. If port 139 is open you can use any winnukers, its the standard NetBIOS port.
 
Service Scan in AGNetTools‚Ñ¢
Conclusion:
Hope this will help some of you who were still wondering how to use IP Tools to their maximum or just wanted to know how to use them at all. I didn't do a complete description of the features because I did already in HackAddict 6.
This is the latest HackAddict it's not really that HA is going but that Weasel is going that makes me sad, I think we should all thank him for the years of work that he gave to the Mac Hacking community. You are going to miss us Weasel ;-)
