If an attacker’s computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?
A.
The zombie will not send a response
B.
31402
C.
31399
D.
31401
If an attacker’s computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?
If an attacker’s computer sends an IPID of 31400 to a zombie computer on an open port in IDLE scanning, what will be the response?
How do I know if they are talking about before idle scan or after idle scan? “in” idle scan is vague and both before and after answers are in the list.
Open port on the zombie= IPID +1, closed= no response…open port on the target= IPID +2.
Yes? No?
Yes.
I guess I read too deep into the question.
if zombie not “really idle” you will have IPID + 2 typically the sequince should be IPID + 1 but yes you are right
Hi.
note. “to a zombie computer on an open port”
In all cases the zombiee will reply but the difference will be in the IPID number.
If the victim port is closes, then the IPID will be by 1.
If the victim port is open, then the IPID will increase by 2
31402 is the correct answer. bitwit actually explained it great