Scan Techniques, TCP Connect Scan (-sT)
TCP scan (Connect Scan) when SYN is not available (usually when user is not root or admin Examples nmap -T4 -sT vps.chrisjanel.eu Links https://vps.chrisjanel.eu/wp-admin/post.php?post=109&action=edit
Tag: nmap
Scan Techniques, TCP SYN (Stealth) scan, -sS
Half open scan Mark as filtered if no response or ICMP error Faster than -sT nmap 192.168.1.1 -sS -vsudo nmap -p2222 --packet-trace -d5 vps.chrisjanel.eu Links https://nmap.org/book/synscan.html#scan-methods-fig-syn-scan-filtered
Discover MAC address
Works only on local network (same lan, subnet): nmap 10.1.2.0/24 -sn
Nmap Discovery Stage
On the local network it does ARP scan. -sL, List Scan, is a reverse DNS scan Shows dns names and descovers the IP of a domain from the record on the DNS server nmap facebook.com/24…
Introduction to Nmap
General notes On local the Discovery users ARP Ping Scan. In order to check scan type, will have to set option double verbose: -vv If root or admin user then the type is Raw Tcp…
Nmap Cheat Sheets
From Station-X: https://www.stationx.net/nmap-cheat-sheet/