Podcast
Questions and Answers
What does a SYN-ACK response indicate about a port during a scan?
What does a SYN-ACK response indicate about a port during a scan?
- The port is unresponsive
- The port is filtered
- The port is open (correct)
- The port is closed
In an Xmas scan, what combination of flags is set?
In an Xmas scan, what combination of flags is set?
- URG and PSH only
- PSH, FIN, and URG (correct)
- SYN and RST
- ACK and FIN
What is the main purpose of the tool Traceroute?
What is the main purpose of the tool Traceroute?
- To ping multiple IP addresses simultaneously
- To identify the path data takes to reach a device (correct)
- To measure network speed between devices
- To scan open ports on a server
What does an unresponsive server typically indicate in a FIN scan?
What does an unresponsive server typically indicate in a FIN scan?
How does the TTL (Time-to-Live) value affect packet transmission?
How does the TTL (Time-to-Live) value affect packet transmission?
What is a primary characteristic of a filtered port according to Nmap states?
What is a primary characteristic of a filtered port according to Nmap states?
Which of the following states can Nmap determine when scanning ports?
Which of the following states can Nmap determine when scanning ports?
Which scanning technique is considered less noisy than a TCP scan?
Which scanning technique is considered less noisy than a TCP scan?
What is the default timing option in Nmap when performing a scan?
What is the default timing option in Nmap when performing a scan?
Which state indicates that Nmap cannot determine whether a port is open or filtered?
Which state indicates that Nmap cannot determine whether a port is open or filtered?
Which Nmap scan type is considered the least stealthy due to its detection signature?
Which Nmap scan type is considered the least stealthy due to its detection signature?
What is the purpose of sending an RST packet in the scanning process?
What is the purpose of sending an RST packet in the scanning process?
What is the key challenge of the Xmas and FIN scans?
What is the key challenge of the Xmas and FIN scans?
In the context of network security, what does a filtered port state indicate?
In the context of network security, what does a filtered port state indicate?
Which Nmap timing option sends a packet every 15 seconds, making it less noticeable?
Which Nmap timing option sends a packet every 15 seconds, making it less noticeable?
What is the purpose of gradually decreasing the TTL values in the Traceroute process?
What is the purpose of gradually decreasing the TTL values in the Traceroute process?
What is the primary purpose of a Ping Sweep?
What is the primary purpose of a Ping Sweep?
Which of the following best describes the function of ports in networking?
Which of the following best describes the function of ports in networking?
What does vulnerability scanning aim to achieve?
What does vulnerability scanning aim to achieve?
When running a port scan, what type of systems are typically targeted?
When running a port scan, what type of systems are typically targeted?
What is the significance of the TTL (Time to Live) value in a traceroute command?
What is the significance of the TTL (Time to Live) value in a traceroute command?
What type of information can be found through scanning a network?
What type of information can be found through scanning a network?
Which scanning technique uses ICMP echo requests to identify active devices on a network?
Which scanning technique uses ICMP echo requests to identify active devices on a network?
Which scenario best fits the function of stealth scanning?
Which scenario best fits the function of stealth scanning?
Flashcards are hidden until you start studying
Study Notes
Scanning Overview
- Scanning identifies live machines to ensure successful remote attacks.
- Determines which operating systems are being used on target machines for potential exploitation.
Types of Scans
-
Ping Sweep:
- Detects live systems by sending ICMP echo requests to multiple IP addresses.
- Helps identify active devices on a network.
-
Port Scanning:
- Finds active IP addresses to target.
- Determines open ports (e.g., port 80 for HTTP, port 443 for HTTPS).
-
Vulnerability Scanning:
- Identifies weaknesses in networks, systems, applications, and devices.
- Generates a report detailing detected vulnerabilities.
Ports in Networking
- Ports are logical access points for data transmission between devices.
- Numbered ports correlate with specific services or protocols.
Information Gathered from Scanning
- IP addresses of devices.
- List of open and closed ports.
- Operating system versions and MAC addresses.
- Service information and network data.
ICMP Scanning
- Utilizes ICMP echo requests to locate active network devices.
- An echo request prompts a device to respond if operational.
Port Scanning Techniques
- Uses SYN-ACK responses to identify open ports during scans.
- Reset (RST) packets allow stealthy scans without establishing full connections.
Specific Scanning Methods
-
Xmas Scan:
- Combines PSH, FIN, and URG flags to confuse the target.
- Lack of response indicates the port may be open or filtered.
-
FIN Scan:
- Sends a FIN flag packet to probe ports.
- Non-response suggests potential openness or filtering.
-
ACK Scan:
- It determines if ports are filtered or unfiltered based on responses.
Nmap States Summary
- Open: An application is accepting connections.
- Closed: No application is listening on the port.
- Filtered: A filtering device is blocking the probe.
- Unfiltered: The port is accessible; its state is undetermined.
- Open|Filtered: Nmap cannot distinguish if the port is open or filtered.
- Closed|Filtered: Rare state indicating ambiguity.
Scanning Tools
-
Fping:
- Pings multiple IP addresses quickly via saved files.
-
Traceroute:
- Examines the path data takes to a device using TTL values.
- Gradually decreases TTL to identify each hop, revealing network delays.
Nmap Scanning Options
- Scans the most common 1000 ports randomly.
- Timing options allow for varied scanning speeds from paranoid to insane.
TCP and SYN Scanning
- TCP scan determines port states through a three-way handshake.
- SYN scan is noisy and detectable due to multiple probing attempts.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
