CEH: Gathering Network And Host Information, Types Of Scan

In Hacking the main focus is over gathering the information about victim or victim's machine. Which will help to find out which type of exploit will works according to the given circumstances. Gathering the network and host information means to find out by which network, the which victim's machine is connected and communicating over the network. Moreover, scanning is also performed for gathering information about open and closed ports. After that they'll able to find the vulnerabilities in the target system and try to get access to the system.

Types Of Scan

As a CEH you should know the scan types and uses:

SYN

SYN scan doesn't complete the TCP three way handshake that is why it is known as a half-open scan. An attacker send a SYN packet to the victim machine if SYN/ACK packet is received back to attacker, then it clarify that the port is listening due to the acknowledgment by the victim that it has completed the connection. While if the attacker is received the RST/ACK packet then it assumed that the port is closed or open.

XMAS

XMAS scan works only on target system that has the RFC 793 development of TCP/IP and it doesn't works against any version of windows.
XMAS scan send a packet with by setting up the FIN, URG and PSH flags of the TCP header. The function of this scan is if the port is active there will be no response but if the port is closed the target responds with a RST/ACK packet.

FIN

A FIN scan send a packet by setting up only the FIN flag of the TCP. This scan is similar to XMAS scan. FIN scan receives no response if the port is active while if the port is closed it receives the RST/ACK packet.

NULL 

NULL scan is also similar to the XMAS scan. But the only difference is that it sends a packet without setting up the any flag of TCP header. NULL scan receives no response if the port is open but if the port is closed it receives the RST/ACK packet.

IDLE

It is just like spoofing an IP address by sending a SYN packet to the victim's machine to find out which services are available over the system. This scan is completed with the help of another system called as "Zombie" (that is not receiving or transmitting any information).

More information

1. Best Pentesting Tools 2018
2. Pentest Tools Free
3. How To Hack
4. Hacker Tools Apk
5. Hacker Tools Online
6. Hacking Tools Pc
7. Pentest Tools For Mac
8. Physical Pentest Tools
9. Hack Tools For Windows
10. Pentest Tools Find Subdomains
11. Pentest Tools For Mac
12. Pentest Tools Linux
13. Hacking Tools Windows 10
14. Hacking Tools Github
15. Hack Tools For Ubuntu
16. Hacking Tools Windows 10
17. Hack Tools
18. Hacking Tools And Software
19. Hacker Tools List
20. Hack Tools Github
21. Pentest Tools Open Source
22. Pentest Tools Apk
23. Ethical Hacker Tools
24. Hack App
25. Free Pentest Tools For Windows
26. New Hack Tools
27. Pentest Tools Linux
28. Pentest Tools For Ubuntu
29. Pentest Tools Port Scanner
30. Hacking Tools For Pc
31. Beginner Hacker Tools
32. Tools 4 Hack
33. Hacking Tools Pc
34. Hacking Tools 2019
35. Hacking Tools For Windows
36. Pentest Tools Find Subdomains
37. Hacking Apps
38. Hack Tool Apk
39. Pentest Tools Port Scanner
40. Hack Tools For Ubuntu
41. Pentest Tools Subdomain
42. Kik Hack Tools
43. Pentest Tools Url Fuzzer
44. Hack Tools For Mac
45. Termux Hacking Tools 2019
46. Hacker Tools 2019
47. Pentest Tools Apk
48. Hack App
49. Physical Pentest Tools
50. Hacking Tools 2019
51. Nsa Hacker Tools
52. Best Hacking Tools 2020
53. New Hacker Tools
54. Hack Tools Download
55. Hack Tools For Pc
56. Hacking Tools Windows
57. Nsa Hacker Tools
58. Kik Hack Tools
59. Tools 4 Hack
60. Black Hat Hacker Tools
61. Pentest Tools Android
62. Pentest Tools Subdomain
63. Hacker Search Tools
64. Tools For Hacker
65. Pentest Tools Website Vulnerability
66. Nsa Hack Tools Download
67. Hacking Tools Github
68. Tools 4 Hack