CEH: Gathering Network And Host Information, Types Of Scan

In Hacking the main focus is over gathering the information about victim or victim's machine. Which will help to find out which type of exploit will works according to the given circumstances. Gathering the network and host information means to find out by which network, the which victim's machine is connected and communicating over the network. Moreover, scanning is also performed for gathering information about open and closed ports. After that they'll able to find the vulnerabilities in the target system and try to get access to the system.

Types Of Scan

As a CEH you should know the scan types and uses:

SYN

SYN scan doesn't complete the TCP three way handshake that is why it is known as a half-open scan. An attacker send a SYN packet to the victim machine if SYN/ACK packet is received back to attacker, then it clarify that the port is listening due to the acknowledgment by the victim that it has completed the connection. While if the attacker is received the RST/ACK packet then it assumed that the port is closed or open.

XMAS

XMAS scan works only on target system that has the RFC 793 development of TCP/IP and it doesn't works against any version of windows.
XMAS scan send a packet with by setting up the FIN, URG and PSH flags of the TCP header. The function of this scan is if the port is active there will be no response but if the port is closed the target responds with a RST/ACK packet.

FIN

A FIN scan send a packet by setting up only the FIN flag of the TCP. This scan is similar to XMAS scan. FIN scan receives no response if the port is active while if the port is closed it receives the RST/ACK packet.

NULL 

NULL scan is also similar to the XMAS scan. But the only difference is that it sends a packet without setting up the any flag of TCP header. NULL scan receives no response if the port is open but if the port is closed it receives the RST/ACK packet.

IDLE

It is just like spoofing an IP address by sending a SYN packet to the victim's machine to find out which services are available over the system. This scan is completed with the help of another system called as "Zombie" (that is not receiving or transmitting any information).

More articles

1. Hacking Tools For Kali Linux
2. Pentest Tools Github
3. Pentest Tools Free
4. What Are Hacking Tools
5. Hackrf Tools
6. How To Install Pentest Tools In Ubuntu
7. Pentest Tools Apk
8. Usb Pentest Tools
9. Hack Website Online Tool
10. Hack Tools Github
11. Pentest Tools Tcp Port Scanner
12. Pentest Tools For Windows
13. Tools 4 Hack
14. Hacker Tools 2019
15. Pentest Tools Kali Linux
16. Hacker Security Tools
17. What Is Hacking Tools
18. Pentest Tools Subdomain
19. Usb Pentest Tools
20. Pentest Recon Tools
21. Hacking Tools Download
22. Hacker Tools For Windows
23. Hacking Tools Online
24. Hacker Tools Free Download
25. Pentest Tools Nmap
26. Hacking Tools Software
27. Pentest Tools Website
28. Tools 4 Hack
29. New Hack Tools
30. Pentest Tools Framework
31. Beginner Hacker Tools
32. Pentest Tools Find Subdomains
33. Blackhat Hacker Tools
34. Kik Hack Tools
35. Hack App
36. Best Pentesting Tools 2018
37. Growth Hacker Tools
38. Hacking Tools Download
39. Hacker Tools Github
40. Pentest Tools Apk
41. Hack Apps
42. Hacking Tools For Windows Free Download
43. Hacker Tools For Pc
44. Physical Pentest Tools
45. Pentest Tools Github
46. New Hack Tools
47. Hack Tools Mac
48. Pentest Tools Url Fuzzer
49. How To Install Pentest Tools In Ubuntu
50. Pentest Reporting Tools
51. Blackhat Hacker Tools
52. Pentest Tools Website
53. Hack Tools For Ubuntu
54. Hacking Tools For Windows
55. Pentest Tools For Mac
56. Install Pentest Tools Ubuntu
57. Hackers Toolbox
58. Hacking Tools Free Download