12/27/2022 - Nmap and Active Recon Flashcards
1
Q
What layer is ARP?
A
Layer 2
2
Q
What is the range of ARP when scanning?
A
Local Subnet
3
Q
Can NMAP only scan using ARP
A
Yes (nmap -PR -sn TARGET)
4
Q
Which way should you scan for live hosts first? (Layer 2 or Layer 3)
A
Layer 2: ARP scan first prior to Layer 3 ICMP “ping”
5
Q
Which ports can telnet and netcat connect to?
A
Any ports
telnet [ip] [port]
nc [ip] [port]
6
Q
How do you grab header information once you connected via telnet?
A
HTTP request
“GET / HTTP/1.1
host: [hostname of your choice”
7
Q
Which protocol does telnet rely on?
A
TCP
8
Q
Port of Telnet?
A
23
9
Q
Which protocol(s) does netcat rely on?
A
UDP or TCP
10
Q
Can you set up a listening port via netcat?
A
Yes
“nc -lp 12345”
