Module 5: Port Scanning
What is Hping?
A tool for creating a custom TCP/IP packet and sending it to a host computer.
What is the primary goal of scanning a network with all network scanning tools like MyLanViewer, Nmap, and Advanced IP Scanner?
Discover running systems attached to the network
True or False. A NULL scan requires setting the FIN, ACK, and URG flags.
False
True or False. FPing doesn't allow pinging multiple IP addresses simultaneously.
False
Port scanning provides the state for what kinds of ports?
Filtered Closed Open
What do security testers and hackers use to determine the services running on a host and the vulnerabilities associated with these services?
Port scanning
A FIN packet sent to a closed port responds with what packet?
RST
A closed port responds to a SYN packet with which of the following packets?
RST
Which parameter can be added to Nmap to run a script scan with the default scripts?
-sC
What additional information about a scanned systems is returned when performing a Service Version scan in Nmap?
A list of available services on the remote host with possible versions for each service
What is the command to find EXTENSIVE Nmap information and examples of correct syntax for use in Linux?
man Nmap
In basic network scanning, ICMP Echo Requests (Type 8) are sent to host computers from the attacker. What type of packet will be sent by the host computer to confirm its presence?
ICMP Echo Reply (Type 0)
What is a potential mistake when performing a ping sweep on a network?
Including a broadcast address in the ping sweep range
Which type of port scan sends a packet with all flags turned off?
NULL
What network scanning tool provides a network map that can be easily exported to Visio or other diagramming software?
Network Topology Mapper
What is the most widely used port scanning tool?
Nmap
What network scanning tool allows you to use parameters (e.g., -sT and -sS) to control or fine tune the type of scan being executed?
Nmap
What is the command to see a BRIEF summary of Nmap commands in a Linux shell?
Nmap -h
What is the command to tell Nmap to perform a Ping Sweep of all hosts in the 192.168.0.0/24 network?
Nmap -sP 192.168.0.*
True or False. Security testers can use Hping to bypass filtering devices.
True
True or False. The following command will cause an error: Fping -f 193.145.85.201 193.145.85.220
True -f is an invalid parameter
