June 2016
Intermediate to advanced
152 pages
3h 30m
English
Now that we have identified which systems exist, we can look at what services exist on those hosts. We will start with TCP services, since they are much easier to understand the results for.
There are a number of different types of TCP scans, but we are going to look at the two most common ones, the Connect scan and the SYN scan.
The two most common types of scans used for detecting open TCP ports are TCP Connect Scans, and SYN scans. SYN scans are the stealthier and potentially safer option, but require root privileges to run. Let's look at both and see how they differ.
Let's start the TCP connect scan:
$ nmap -sT 10.0.0.10 Starting Nmap 6.40 ( http://nmap.org ) at 2016-05-06 15:14 EDT Nmap scan report ...
Read now
Unlock full access