What type of port scan is represented here?

What type of port scan is represented here.

What type of port scan is represented here?

A.
Stealth Scan

B.
Full Scan

C.
XMAS Scan

D.
FIN Scan

Explanation:
A stealth scan is a kind of scan that is designed to go undetected by auditing tools.



Leave a Reply 3

Your email address will not be published. Required fields are marked *


JQ

JQ

This is a half open scan, or XMAS scan. A fin scan, (which is the same thing as a stealth scan) works by firing off a FIN packet.

JQ

JQ

I guess technically none of these are correct.

Peterson

Peterson

Actually, XMAS scan is a scan that uses all flags in the packet (URG, PSH and FIN). If a RST packet is received, the port is considered closed, while no response means it is open|filtered. Full Scan completes the connection, so it’s more reliable, but obviously can be detected. Since that no FIN flag was sent, then the only viable option it’s a Stealth scan (since no connection was completed).