Uploaded byhughpearse
333 views

Nmap flags table

The document discusses different techniques for determining if a port is open on a server using the TCP protocol, including ACK, FIN, Maimon, NULL, TCP SYN, TCP Connect, and Window scans. It explains that the TCP protocol has 8 flags in its frame header that can be used to identify the scan type based on which flags packets sent by an attacker set and the response flags set by the victim.

Embed presentation

Download to read offline
There exist many different techniques using the TCP protocol for determining if a port is open on a server, such as ACK, FIN, Maimon, NULL, TCP SYN, TCP Connect, Window and Christmas Tree scans. The TCP protocol has 8 flags in its frame header. These flags can be used to identify the scan type. Attacker: Scans FIN SYN connect() PSH ACK URG ECE CWR URG ECE CWR URG ECE CWR 1st SYN RST 1st FIN 1st XMAS 1st 1st 1st NULL Maimon 1st 1st ACK 1st Window 1st Victim: Scans FIN SYN RST 2nd 2nd 2nd SYN 2nd 2nd FIN 2nd XMAS 2nd NULL 2nd Maimon 2nd ACK 2nd Window 2nd connect() Attacker: Scans connect() SYN FIN XMAS NULL Maimon ACK Window FIN SYN RST PSH PSH ACK ACK 3rd

More Related Content

PPTX
Poodle
bySamit Anwer
 
PDF
tls_resumption_detailed_final
bySergii Cherkavskyi
 
PDF
OpenCanary and Canary Tokens
byMats Karlsson
 
PPTX
Introduction to cryptography
bymukesh prajapati
 
PPTX
Network Sniffing
bybudi rahardjo
 
PDF
Hack The Box Nest 10.10.10.178
byAbhichai L.
 
PPTX
Substitution techniques
byvinitha96
 
PPTX
Introducing TLS 1.3 – The future of Encryption
byRapidSSLOnline.com
 
Poodle
bySamit Anwer
 
tls_resumption_detailed_final
bySergii Cherkavskyi
 
OpenCanary and Canary Tokens
byMats Karlsson
 
Introduction to cryptography
bymukesh prajapati
 
Network Sniffing
bybudi rahardjo
 
Hack The Box Nest 10.10.10.178
byAbhichai L.
 
Substitution techniques
byvinitha96
 
Introducing TLS 1.3 – The future of Encryption
byRapidSSLOnline.com
 

More from hughpearse

PDF
HughPearseEsriTraining
byhughpearse
 
PDF
HughPearse-ACE-Forensics-Certification
byhughpearse
 
PDF
Prism-Proof Cloud Email Services
byhughpearse
 
PDF
ACE forensics certification
byhughpearse
 
PDF
Buffer overflow tutorial
byhughpearse
 
PDF
Diffie-Hellman key exchange
byhughpearse
 
PDF
Metasploit cheat sheet
byhughpearse
 
PDF
Low Level Exploits
byhughpearse
 
HughPearseEsriTraining
byhughpearse
 
HughPearse-ACE-Forensics-Certification
byhughpearse
 
Prism-Proof Cloud Email Services
byhughpearse
 
ACE forensics certification
byhughpearse
 
Buffer overflow tutorial
byhughpearse
 
Diffie-Hellman key exchange
byhughpearse
 
Metasploit cheat sheet
byhughpearse
 
Low Level Exploits
byhughpearse
 

Nmap flags table

  • 1.
    There exist manydifferent techniques using the TCP protocol for determining if a port is open on a server, such as ACK, FIN, Maimon, NULL, TCP SYN, TCP Connect, Window and Christmas Tree scans. The TCP protocol has 8 flags in its frame header. These flags can be used to identify the scan type. Attacker: Scans FIN SYN connect() PSH ACK URG ECE CWR URG ECE CWR URG ECE CWR 1st SYN RST 1st FIN 1st XMAS 1st 1st 1st NULL Maimon 1st 1st ACK 1st Window 1st Victim: Scans FIN SYN RST 2nd 2nd 2nd SYN 2nd 2nd FIN 2nd XMAS 2nd NULL 2nd Maimon 2nd ACK 2nd Window 2nd connect() Attacker: Scans connect() SYN FIN XMAS NULL Maimon ACK Window FIN SYN RST PSH PSH ACK ACK 3rd