• Browse by Tags

CEH: Identifying Services & Scanning Ports | Gathering Network And Host Information | NMAP


CEH scanning methodology is the important step i.e. scanning for open ports over a network. Port is the technique used to scan for open ports. This methodology performed for the observation of the open and close ports running on the targeted machine. Port scanning gathered a valuable information about  the host and the weakness of the system more than ping sweep.

Network Mapping (NMAP)

Basically NMAP stands for Network Mapping. A free open source tool used for scanning ports, service detection, operating system detection and IP address detection of the targeted machine. Moreover, it performs a quick and efficient scanning a large number of machines in a single session to gathered information about ports and system connected to the network. It can be used over UNIX, LINUX and Windows.

There are some terminologies which we should understand directly whenever we heard like Open ports, Filtered ports and Unfiltered ports.

Open Ports means the target machine accepts incoming request on that port cause these ports are used to accept packets due to the configuration of TCP and UDP.

Filtered ports means the ports are usually opened but due to firewall or network filtering the nmap doesn't detect the open ports.

Unfiltered means the nmap is unable to determine whether the port is open or filtered  while the port is accessible.

Types Of NMAP Scan


Scan Type Description
Null Scan This scan is performed by both an ethical hackers and black hat hackers. This scan is used to identify the TCP port whether it is open or closed. Moreover, it only works over UNIX  based systems.
TCP connect The attacker makes a full TCP connection to the target system. There's an opportunity to connect the specifically port which you want to connect with. SYN/ACK signal observed for open ports while RST/ACK signal observed for closed ports.
ACK scan Discovering the state of firewall with the help ACK scan whether it is stateful or stateless. This scan is typically used for the detection of filtered ports if ports are filtered. Moreover, it only works over the UNIX based systems.
Windows scan This type of scan is similar to the ACK scan but there is ability to detect an open ports as well filtered ports.
SYN stealth scan This malicious attack is mostly performed by attacker to detect the communication ports without making full connection to the network.
This is also known as half-open scanning. 

 

All NMAP Commands 


Commands Scan Performed
-sT TCP connect scan
-sS SYN scan
-sF FIN scan
-sX XMAS tree scan
-sN Null scan
-sP Ping scan
-sU UDP scan
-sO Protocol scan
-sA ACK scan
-sW Window scan
-sR RPC scan
-sL List/DNS scan
-sI Idle scan
-Po Don't ping
-PT TCP ping
-PS SYN ping
-PI ICMP ping
-PB ICMP and TCP ping
-PB ICMP timestamp
-PM ICMP netmask
-oN Normal output
-oX XML output
-oG Greppable output
-oA All output
-T Paranoid Serial scan; 300 sec between scans
-T Sneaky Serial scan; 15 sec between scans
-T Polite Serial scan; .4 sec between scans
-T Normal Parallel scan
-T Aggressive Parallel scan, 300 sec timeout, and 1.25 sec/probe
-T Insane Parallel scan, 75 sec timeout, and .3 sec/probe

 

How to Scan

You can perform nmap scanning over the windows command prompt followed by the syntax below. For example, If you wanna scan the host with the IP address 192.168.2.1 using a TCP connect scan type, enter this command:

nmap 192.168.2.1 –sT

nmap -sT 192.168.2.1

Related posts

  1. Black Hat Hacker Tools
  2. Hacker Tools Free Download
  3. Hacker Tools 2019
  4. Hack Apps
  5. How To Install Pentest Tools In Ubuntu
  6. Physical Pentest Tools
  7. Nsa Hack Tools
  8. Pentest Tools Find Subdomains
  9. Computer Hacker
  10. Pentest Reporting Tools
  11. Hacking Tools For Pc
  12. Pentest Tools Nmap
  13. Pentest Tools For Mac
  14. Termux Hacking Tools 2019
  15. Hack Tools Github
  16. Hacking Tools Usb
  17. Hack Tools
  18. Hacker Hardware Tools
  19. Hacking Tools Windows 10
  20. Hack Tools
  21. Pentest Automation Tools
  22. Bluetooth Hacking Tools Kali
  23. Hacking Tools Name
  24. Hack Tools
  25. Hacking Tools
  26. New Hack Tools
  27. Pentest Tools List
  28. Pentest Tools Nmap
  29. Hacker Tools Apk
  30. How To Install Pentest Tools In Ubuntu
  31. Underground Hacker Sites
  32. What Is Hacking Tools
  33. Hack Tools
  34. Pentest Tools Website Vulnerability
  35. Pentest Tools Open Source
  36. New Hack Tools
  37. Hacking Tools For Windows
  38. Pentest Tools For Ubuntu
  39. Hacker Tools Online
  40. Best Pentesting Tools 2018
  41. Install Pentest Tools Ubuntu
  42. Hack Tools 2019
  43. Hacker Tools Github
  44. Computer Hacker
  45. Hack Tools Pc
  46. Hacker Hardware Tools
  47. Hacking App
  48. Hacker Security Tools
  49. What Is Hacking Tools
  50. New Hacker Tools
  51. Hacking Tools For Kali Linux
  52. Hack Tools Download
  53. Hacker Tools Linux
  54. Blackhat Hacker Tools
  55. Pentest Tools For Android
  56. Pentest Tools For Windows
  57. New Hacker Tools
  58. Hack Website Online Tool
  59. Pentest Tools Kali Linux
  60. Hackers Toolbox
  61. Hacker Tools For Windows
  62. Hacker Tools For Ios
  63. Hacker Tools For Windows
  64. Game Hacking
  65. Hack Tools For Games
  66. Hacker Tools
  67. Pentest Tools List
  68. Hack Tool Apk
  69. Hacking Tools For Pc
  70. Hacking App
  71. Hacking Tools 2019
  72. How To Install Pentest Tools In Ubuntu
  73. Hacker Tools For Ios
  74. Pentest Tools Website
  75. Hacking Tools Mac
  76. Hacking Tools Github
  77. Hack And Tools
  78. New Hacker Tools
  79. Game Hacking
  80. Hacking Tools
  81. Hacker Security Tools
  82. How To Install Pentest Tools In Ubuntu
  83. Physical Pentest Tools
  84. Hack Tools For Windows
  85. Pentest Tools Framework
  86. Hack Tools Github
  87. Hacking Tools For Kali Linux
  88. Hacker Tools Apk
  89. Pentest Tools For Ubuntu
  90. Hacking Tools For Pc
  91. Underground Hacker Sites
  92. Hacking Tools Free Download
  93. Hacking Tools Github

0 comments on "CEH: Identifying Services & Scanning Ports | Gathering Network And Host Information | NMAP"



Post a Comment