If a tester is attempting to ping a target that exists but receives no response or a response that states the destination is unreachable, ICMP may be disabled and the network may be using TCP. Which…

Traceroute relies primarily on ICMP or UDP packets to map network paths and would also be blocked in an ICMP-disabled environment without special TCP mode flags.

Hping supports crafting and sending raw TCP, UDP, and ICMP packets, and allows the tester to specify destination ports and flags, enabling a TCP-based ping even when ICMP is disabled by a firewall or network policy. For example, 'hping3 -S <target> -p 80' sends a TCP SYN packet and waits for a response, confirming host availability via TCP. This flexibility makes it the standard tool for host discovery when ICMP is filtered.

TCP ping describes a general concept or technique rather than a specific standalone tool available in a standard penetration testing toolkit.

Broadcast ping sends ICMP echo requests to a subnet broadcast address and does not help when ICMP is disabled on the target network.