Reading...
Play button
Play button
Use LEFT and RIGHT arrow keys to navigate between flashcards;
Use UP and DOWN arrow keys to flip the card;
H to show hint;
A reads text to speech;
15 Cards in this Set
- Front
- Back
|
ICMP 8
|
Echo request
|
|
|
ICMP 0
|
Echo Reply
|
|
|
ICMP 3
|
Destination unreachable, host or network cannot reach
|
|
|
ICMP 11
|
Time exceeded
|
|
|
ICMP 10 AND 13
|
10 host administratively prohibited
13 communication administratively prohibited |
|
|
Nmap TCP
|
This will run full connection, three way handshake
|
|
|
Nmap SYN
|
Known as a half open scan, only SYN is sent on completion three way handshake
|
|
|
Nmap FIN
|
Reverse SYN, this send FIN packet and if the port is close the computer will send RST
|
|
|
Nmap XMAS
|
It send all the flags, FIN, URG and PSH. The responds are the same like FIN, is the port is close will get RST
|
|
|
Namp ACK
|
Used for Linux/unix, send ACK, it use the ICMP destination unreachable messages to determine what ports may be open on a firewall
|
|
|
Nmap NULL
|
Almost the opposite of the XMAS scan. The NULL scan sends packets with no flags set. Responses will vary, depending on the OS and version, but NULL scans are designed for Unix/Linux machines.
|
|
|
hping3
|
Ping sweep: hping3 -1 IPaddress
SYN scan: hping3 -8 IPaddress ACK scan: hping3 -A IPaddress XMAS scan: hping3 -F -P -U IPaddress UDP scan: hping3: -2 IPaddress |
|
|
Nmap-PT 192.168.1.3
|
This does TCP sweep using port 80, we can change the port
|
|
|
nmap -sT -oN result.txt 192.168.1.3
|
This does a full connect and save the result.
|
|
|
Port Distributions
|
Range 0 to 65,535
Well-know 0-1023 Registered 1024-49,151 Dynamic 49,152-65,535 |
