ExamGecko
Question list
Search
Search

Related questions











Question 203 - 312-50v12 discussion

Report
Export

While scanning with Nmap, Patin found several hosts which have the IP ID of incremental sequences.

He then decided to conduct: nmap -Pn -p- -si kiosk.adobe.com www.riaa.com. kiosk.adobe.com is the host with incremental IP ID sequence. What is the purpose of using "-si" with Nmap?

A.
Conduct stealth scan
Answers
A.
Conduct stealth scan
B.
Conduct ICMP scan
Answers
B.
Conduct ICMP scan
C.
Conduct IDLE scan
Answers
C.
Conduct IDLE scan
D.
Conduct silent scan
Answers
D.
Conduct silent scan
Suggested answer: C

Explanation:

Once a suitable zombie has been found, performing a scan is easy. Simply specify the zombie hostname to the -sI option and Nmap does the rest. Example 5.19 shows an example of Ereet scanning the Recording Industry Association of

America by bouncing an idle scan off an Adobe machine named Kiosk.

Example 5.19. An idle scan against the RIAA

# nmap -Pn -p- -sI kiosk.adobe.com www.riaa.com

Starting Nmap ( http://nmap.org )

Idlescan using zombie kiosk.adobe.com (192.150.13.111:80); Class: Incremental

Nmap scan report for 208.225.90.120

(The 65522 ports scanned but not shown below are in state: closed)

Port State Service

21/tcp open ftp

25/tcp open smtp

80/tcp open http

111/tcp open sunrpc

135/tcp open loc-srv

443/tcp open https

1027/tcp open IIS

1030/tcp open iad1

2306/tcp open unknown

5631/tcp open pcanywheredata

7937/tcp open unknown

7938/tcp open unknown

36890/tcp open unknown

Nmap done: 1 IP address (1 host up) scanned in 2594.47 seconds

https://nmap.org/book/idlescan.html

asked 18/09/2024
Henry R L Thom
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first