312-49 · Question #323
What operating system would respond to the following command? C:\> nmap -sW 10.10.145.65
The correct answer is C. FreeBSD. The nmap -sW flag performs a TCP Window scan, which exploits an implementation quirk in how certain operating systems handle TCP RST packets. On most systems (Windows, Linux), the TCP window size in RST responses is always zero, making open and closed ports indistinguishable…
Question
What operating system would respond to the following command? C:> nmap -sW 10.10.145.65
Options
- AWindows XP
- BMac OS X
- CFreeBSD
- DWindows 95
How the community answered
(67 responses)- A15% (10)
- B9% (6)
- C72% (48)
- D4% (3)
Explanation
The nmap -sW flag performs a TCP Window scan, which exploits an implementation quirk in how certain operating systems handle TCP RST packets. On most systems (Windows, Linux), the TCP window size in RST responses is always zero, making open and closed ports indistinguishable. However, FreeBSD (and some other BSD variants) set a non-zero TCP window value in RST responses for open ports, making the scan effective. The Window scan is most reliable against FreeBSD targets, which is why C is correct.
Topics
Community Discussion
No community discussion yet for this question.