Nmap Inverse TCP Scan

Question 1

Define Inverse TCP Scan

Answer 1

Utilize abnormal TCP flags (Fin/Push/Urge/Null) to detect closed ports

Question 2

Inverse TCP Scan Command

Answer 2

nmap -sN [ip/hostname]
nmap -sF [ip/hostname]
nmap -sX [ip/hostname]

Question 3

Define XMAS Scan

Answer 3

Send fin, push, and null command

Question 4

XMAS Scan Command

Answer 4

nmap -sX [ip/hostname]

Question 5

Considerations

Answer 5

Flags are RFC compliant (Windows does not follow RFC)

Question 6

Define Maimon Scans

Answer 6

Sends fin, ack scan

Question 7

Maimon Scans Command

Answer 7

nmap -sM [ip/hostname]

Question 8

Inverse TCP Scan Flag for Additional Information

Answer 8

–reason