Nmap - Network Mapper Nmap is a very important tool in network discovery. It is the de-facto tool for footprinting networks. It is capable of finding alive hosts, access points, finger-printing operating systems, and verifying running or available services. It also has important IDS evasion capabilities. Seven generic scan types for port scanning: TCP Connect Runs through a full connection (three-way handshake) on all ports. Easiest to detect, but possibly the most reliable. Open ports will respond with a SYN/ACK, closed ports with a RST/ACK. SYN Known as a “half-open scan.” Only SYN packets are sent to ports (no completion of the three-way handshake ever takes place). Open ports will respond with a SYN/ACK, closed ports with a RST/ACK. FIN scans run the communications setup in reverse, sending a packet with the FIN flag set. Closed ports will respond with RST, whereas open ports won’t respond at all. ...
Comments
Post a Comment