Intro to Scanning 3

Which nc flag is used to when port scanning
-z
-c
-v
-p
-z
What flag is used to tell windows to only send 1 ping request
-n 1
-c 1
-p 1
-t 1
-n 1
When running ping 8.8.8.8, how many ping request will a linux machine send
an unlimited number
100
4
1
an unlimited number
What is the default scan used by masscan
SYN Scan
UDP scan
TCP scan
ICMP Scan
SYN Scan
What is the correct flag to scan the UDP service TFTP
masscan -pU:161
masscan -p 161
masscan -pU 161
masscan -U:161
masscan -pU:161
What is the command to output masscan results into an xml format
-oX
-oA
-output-file
-oXML
-oX
What is the default number of ports scanned by masscan
There is no default value
100
all 65535 ports are scanned
1
There is no default value
What is the best way to identify live hosts if you have no hacking tools
ping
wireshark
looking for network diagrams
TCP analysis
ping
When using the inbuilt ping command to identify live hosts what is most useful
writing a loop to ping a target range
using hyper-threading to speed up the scan
having verbose output
outputing results into a file
writing a loop to ping a target range
What level of privilege is required to run masscan
root
user
service
anonymous
root
On a windows machine, which shell is best to use to create and execute a ping sweep
powershell
python
CMD
bash
powershell
What flag can be used with netcat to conduct a portscan
-zv
-sT
--port
-p
-zv
What is the importance of the -c flag when running a ping sweep in Linux (eg For i in {1..254}; do ping -c 1 X.X.X.$i)
it only sends 1 ping packet
it counts the amount of ping packets being sent
it detects collisions
it makes sure that ICMP type 1 packets are being sent
it only sends 1 ping packet
Which command will run a pingsweep from a windows device
1..254 | % {echo ((New-Object Net.Sockets.TcpClient).Connect(“192.168.1.”,$_)) “live hosts - $_”} 2>$null
For i in {1..254}; do ping -c 1 192.168.1.$i | grep “64”; done
For i in {1..254}; do nc -zv 192.168.1.$i; done
1..254 | % {echo “X192.168.1.$_”; ping -n 1 -w 100 192.168.1.$_} | Select-String TTL
1..254 | % {echo “X192.168.1.$_”; ping -n 1 -w 100 192.168.1.$_} | Select-String TTL
Your Score
Score Label
Score Summary