Jim, a professional hacker, targeted an organization that is operating critical Industrial Infrastructure. Jim used Nmap to scan open pons and running services on systems connected to the organization's OT network. He used an Nmap command to identify Ethernet/IP devices connected to the Internet and further gathered Information such as the vendor name, product code and name, device name, and IP address. Which of the following Nmap commands helped Jim retrieve the required information?

Question

Accepted Answer

B. nmap -Pn -sU -p 44818 --script enip-info < Target IP > The command `nmap -Pn -sU -p 44818 --script enip-info < Target IP >` correctly identifies the use of a UDP scan (`-sU`) on port 44818, which is the standard port for Ethernet/IP (CIP - Common Industrial Protocol) traffic. The `--script enip-info` is an Nmap Scripting Engine (NSE) script specifically designed to query Ethernet/IP devices and extract vendor name, product code and name, device name, and IP address.

Answer

A. nmap -Pn -sT --scan-delay 1s --max-parallelism 1 -p < Port List > < Target IP > This command uses a generic TCP scan (`-sT`) and does not include the specific NSE script required to query Ethernet/IP devices for detailed information.

Answer

C. nmap -Pn -sT -p 46824 < Target IP > This command is a generic TCP scan (`-sT`) on port 46824, which is not the standard port for Ethernet/IP (CIP), and it lacks the necessary NSE script for information gathering.

Answer

D. nmap -Pn -sT -p 102 --script s7-info < Target IP > The `--script s7-info` is used for Siemens S7 PLC devices, typically on TCP port 102, not for generic Ethernet/IP devices.

Jim, a professional hacker, targeted an organization that is operating critical Industrial Infrastructure. Jim used Nmap to scan open pons and running services on systems connected to the…

Question

Options

How the community answered

Why each option

Topics

Community Discussion