CEH: Gathering Network And Host Information, Types Of Scan

In Hacking the main focus is over gathering the information about victim or victim's machine. Which will help to find out which type of exploit will works according to the given circumstances. Gathering the network and host information means to find out by which network, the which victim's machine is connected and communicating over the network. Moreover, scanning is also performed for gathering information about open and closed ports. After that they'll able to find the vulnerabilities in the target system and try to get access to the system.

Types Of Scan

As a CEH you should know the scan types and uses:

SYN

SYN scan doesn't complete the TCP three way handshake that is why it is known as a half-open scan. An attacker send a SYN packet to the victim machine if SYN/ACK packet is received back to attacker, then it clarify that the port is listening due to the acknowledgment by the victim that it has completed the connection. While if the attacker is received the RST/ACK packet then it assumed that the port is closed or open.

XMAS

XMAS scan works only on target system that has the RFC 793 development of TCP/IP and it doesn't works against any version of windows.
XMAS scan send a packet with by setting up the FIN, URG and PSH flags of the TCP header. The function of this scan is if the port is active there will be no response but if the port is closed the target responds with a RST/ACK packet.

FIN

A FIN scan send a packet by setting up only the FIN flag of the TCP. This scan is similar to XMAS scan. FIN scan receives no response if the port is active while if the port is closed it receives the RST/ACK packet.

NULL 

NULL scan is also similar to the XMAS scan. But the only difference is that it sends a packet without setting up the any flag of TCP header. NULL scan receives no response if the port is open but if the port is closed it receives the RST/ACK packet.

IDLE

It is just like spoofing an IP address by sending a SYN packet to the victim's machine to find out which services are available over the system. This scan is completed with the help of another system called as "Zombie" (that is not receiving or transmitting any information).

More information

1. Pentest Tools Linux
2. Hacking App
3. Pentest Tools Review
4. Pentest Tools Port Scanner
5. Hack App
6. Hacker Techniques Tools And Incident Handling
7. Bluetooth Hacking Tools Kali
8. Physical Pentest Tools
9. New Hack Tools
10. New Hack Tools
11. Pentest Reporting Tools
12. Hack Tools
13. Termux Hacking Tools 2019
14. Termux Hacking Tools 2019
15. New Hacker Tools
16. Pentest Tools Android
17. What Are Hacking Tools
18. Hacking Tools And Software
19. Hack Tools Pc
20. Top Pentest Tools
21. Pentest Tools Windows
22. Hack Tools For Mac
23. Pentest Automation Tools
24. Hacking Tools Usb
25. New Hacker Tools
26. Pentest Tools Tcp Port Scanner
27. Hack Apps
28. Hacking Tools Usb
29. Hacking Tools For Windows Free Download
30. Growth Hacker Tools
31. Pentest Tools Alternative
32. Pentest Tools For Windows
33. Tools For Hacker
34. Hack Rom Tools
35. Pentest Automation Tools
36. Pentest Tools Find Subdomains
37. Hacking Tools Windows
38. Bluetooth Hacking Tools Kali
39. Hacker
40. Tools Used For Hacking
41. Growth Hacker Tools
42. Hacker Tools Free Download
43. Pentest Tools Bluekeep
44. Hacker Search Tools
45. Free Pentest Tools For Windows
46. Black Hat Hacker Tools
47. Best Pentesting Tools 2018
48. New Hack Tools
49. Hacking Tools Usb
50. Pentest Tools Android
51. Pentest Tools Port Scanner
52. Hacker Security Tools
53. Hack Tool Apk
54. Pentest Tools Android
55. Hack Tools For Games
56. New Hack Tools
57. Hacker Techniques Tools And Incident Handling
58. Pentest Recon Tools
59. Black Hat Hacker Tools
60. Pentest Reporting Tools
61. Hacking Tools
62. Hacker Tools Free
63. Pentest Tools For Windows
64. Hacks And Tools
65. Pentest Tools Website Vulnerability
66. Hack Tools 2019