Scanning & Enumeration Flashcards
1
Q
How to tell nmap to scan all ports?
A
Use the -p flag with -
nmap -p- …
2
Q
True or False
The -sS scan is really stealth nowadays and it wont be detected.
A
False. It can be detected, it’s not stealthy at all.
3
Q
How to make an UDP scan? Should you keep the same configurations of the TCP scan? Justify your answer.
A
Using the -sU flag. No, because UDP scans take a lot more time to complete so you should remove the -A flag and only scan the most important ports with -p
4
Q
Why is it useful to connect to ssh in the Scanning & Enumeration stage?
A
To get more information about it. If a nmap scan didn’t return the version, you could try to connect directly in order to search for the version running in the target machine.
