312-49 · Question #453
Why are Linux/Unix based computers better to use than Windows computers for idle scanning?
The correct answer is C. Windows computers are constantly talking. Idle scanning (zombie scanning) is a technique that uses a third-party 'zombie' host to perform a port scan without revealing the attacker's real IP address. It relies on the zombie host having a predictable, incrementing IP ID sequence number so the scanner can infer whether…
Question
Why are Linux/Unix based computers better to use than Windows computers for idle scanning?
Options
- AWindows computers will not respond to idle scans
- BLinux/Unix computers are easier to compromise
- CWindows computers are constantly talking
- DLinux/Unix computers are constantly talking
How the community answered
(39 responses)- A3% (1)
- B8% (3)
- C87% (34)
- D3% (1)
Explanation
Idle scanning (zombie scanning) is a technique that uses a third-party 'zombie' host to perform a port scan without revealing the attacker's real IP address. It relies on the zombie host having a predictable, incrementing IP ID sequence number so the scanner can infer whether ports are open. Windows computers are constantly generating background network traffic - from Windows Update, NetBIOS, SMB broadcasts, auto-discovery services, and other built-in features - causing their IP ID counters to increment unpredictably even when 'idle.' Linux/Unix systems by default produce much less unsolicited background traffic, making their IP ID sequences more predictable and stable, which is essential for the idle scan technique to work reliably.
Topics
Community Discussion
No community discussion yet for this question.