Stealth scanning
If a penetration tester attempts to scan a target, there is a high chance that a TCP three-way handshake will be established prior to the actual scanning of the target. A TCP three-way handshake is established initially for all TCP-based communication on the network; once established, the regular flow of data happens.
The following is a diagram demonstrating the TCP three-way handshake between two devices. To further explain the TCP three-way handshake, let's imagine there are two device on a network, A and B. Let's say device A would like to communicate with device B; device A would send a TCP SYN packet to device B as a method of initiating a conversation. When device B receives a TCP SYN packet, it will respond with a ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access