Nmap IDLE/IPID Scan

Question 1

Define a Zombie

Answer 1

Intermediary host that allows interactions with their IPID to scan another host through incremental IDs

Question 2

IDLE/IPID Scan Step 1

Answer 2

Send successive SYN/ACK packets to identify zombie by incremental IPID

Question 3

IDLE/IPID Scan Step 2

Answer 3

Send SYN/ACK to the target spoofing the zombie IP

Question 4

IDLE/IPID Scan Step 3

Answer 4

Send SYN/ACK to the zombie and check whether IPID skipped an increment

Question 5

IDLE/IPDI Scan

Answer 5

nmap -sI [zombie] [target] -Pn