Module 5: Port Scanning

What is Hping?

A tool for creating a custom TCP/IP packet and sending it to a host computer.

What is the primary goal of scanning a network with all network scanning tools like MyLanViewer, Nmap, and Advanced IP Scanner?

Discover running systems attached to the network

True or False. A NULL scan requires setting the FIN, ACK, and URG flags.

False

True or False. FPing doesn't allow pinging multiple IP addresses simultaneously.

False

Port scanning provides the state for what kinds of ports?

Filtered Closed Open

What do security testers and hackers use to determine the services running on a host and the vulnerabilities associated with these services?

Port scanning

A FIN packet sent to a closed port responds with what packet?

RST

A closed port responds to a SYN packet with which of the following packets?

RST

Which parameter can be added to Nmap to run a script scan with the default scripts?

-sC

What additional information about a scanned systems is returned when performing a Service Version scan in Nmap?

A list of available services on the remote host with possible versions for each service

What is the command to find EXTENSIVE Nmap information and examples of correct syntax for use in Linux?

man Nmap

In basic network scanning, ICMP Echo Requests (Type 8) are sent to host computers from the attacker. What type of packet will be sent by the host computer to confirm its presence?

ICMP Echo Reply (Type 0)

What is a potential mistake when performing a ping sweep on a network?

Including a broadcast address in the ping sweep range

Which type of port scan sends a packet with all flags turned off?

NULL

What network scanning tool provides a network map that can be easily exported to Visio or other diagramming software?

Network Topology Mapper

What is the most widely used port scanning tool?

Nmap

What network scanning tool allows you to use parameters (e.g., -sT and -sS) to control or fine tune the type of scan being executed?

Nmap

What is the command to see a BRIEF summary of Nmap commands in a Linux shell?

Nmap -h

What is the command to tell Nmap to perform a Ping Sweep of all hosts in the 192.168.0.0/24 network?

Nmap -sP 192.168.0.*

True or False. Security testers can use Hping to bypass filtering devices.

True

True or False. The following command will cause an error: Fping -f 193.145.85.201 193.145.85.220

True -f is an invalid parameter