CEH: Gathering Network And Host Information, Types Of Scan

In Hacking the main focus is over gathering the information about victim or victim's machine. Which will help to find out which type of exploit will works according to the given circumstances. Gathering the network and host information means to find out by which network, the which victim's machine is connected and communicating over the network. Moreover, scanning is also performed for gathering information about open and closed ports. After that they'll able to find the vulnerabilities in the target system and try to get access to the system.

Types Of Scan

As a CEH you should know the scan types and uses:

SYN

SYN scan doesn't complete the TCP three way handshake that is why it is known as a half-open scan. An attacker send a SYN packet to the victim machine if SYN/ACK packet is received back to attacker, then it clarify that the port is listening due to the acknowledgment by the victim that it has completed the connection. While if the attacker is received the RST/ACK packet then it assumed that the port is closed or open.

XMAS

XMAS scan works only on target system that has the RFC 793 development of TCP/IP and it doesn't works against any version of windows.
XMAS scan send a packet with by setting up the FIN, URG and PSH flags of the TCP header. The function of this scan is if the port is active there will be no response but if the port is closed the target responds with a RST/ACK packet.

FIN

A FIN scan send a packet by setting up only the FIN flag of the TCP. This scan is similar to XMAS scan. FIN scan receives no response if the port is active while if the port is closed it receives the RST/ACK packet.

NULL 

NULL scan is also similar to the XMAS scan. But the only difference is that it sends a packet without setting up the any flag of TCP header. NULL scan receives no response if the port is open but if the port is closed it receives the RST/ACK packet.

IDLE

It is just like spoofing an IP address by sending a SYN packet to the victim's machine to find out which services are available over the system. This scan is completed with the help of another system called as "Zombie" (that is not receiving or transmitting any information).

Related posts

1. Hacking Tools For Kali Linux
2. Pentest Tools List
3. Free Pentest Tools For Windows
4. Hacking Tools Software
5. Bluetooth Hacking Tools Kali
6. Hacking Tools For Windows Free Download
7. Computer Hacker
8. Hacking Apps
9. Easy Hack Tools
10. Hacker Tools 2019
11. Pentest Tools Subdomain
12. Computer Hacker
13. Hacking Tools Name
14. Wifi Hacker Tools For Windows
15. Hacking Tools Download
16. How To Install Pentest Tools In Ubuntu
17. Hack Tools Mac
18. Pentest Tools Find Subdomains
19. What Are Hacking Tools
20. Hackrf Tools
21. Hacker
22. Pentest Tools Free
23. New Hacker Tools
24. Best Hacking Tools 2019
25. Pentest Tools Kali Linux
26. Game Hacking
27. Blackhat Hacker Tools
28. Best Hacking Tools 2020
29. Pentest Box Tools Download
30. Hacking Tools
31. Free Pentest Tools For Windows
32. Hack Tools For Games
33. Hacking Tools 2020
34. Nsa Hack Tools
35. Pentest Tools For Ubuntu
36. Hacker Tools Online
37. New Hack Tools
38. Pentest Tools Port Scanner
39. Pentest Tools Online
40. Hacking Tools For Windows
41. Pentest Tools Framework
42. Hacking Tools Download
43. Pentest Tools Android
44. Hack Tool Apk
45. Best Pentesting Tools 2018
46. Hacker Tools For Mac
47. Pentest Tools Online
48. Hacker Tools Online
49. Hacking Tools Download
50. Pentest Reporting Tools
51. Hack Tools For Mac
52. Hacker Tools 2020
53. Hacker Tools For Ios
54. Hacker Security Tools
55. Pentest Tools Kali Linux
56. Pentest Tools Linux
57. Hack Tools For Mac
58. Hacks And Tools
59. Usb Pentest Tools
60. Underground Hacker Sites
61. Pentest Tools For Ubuntu
62. Pentest Tools Find Subdomains
63. Hacking App
64. Hacking Tools Windows 10
65. Best Pentesting Tools 2018
66. Physical Pentest Tools