312-50V13 · Question #553
Which of the following will perform an Xmas scan using NMAP?
The correct answer is C. nmap -sX 192.168.1.254. To perform an Xmas scan using NMAP, the correct command-line option is -sX, which sets the FIN, PSH, and URG flags in the TCP header.
Question
Options
- Anmap -sA 192.168.1.254
- Bnmap -sP 192.168.1.254
- Cnmap -sX 192.168.1.254
- Dnmap -sV 192.168.1.254
How the community answered
(36 responses)- A3% (1)
- C94% (34)
- D3% (1)
Why each option
To perform an Xmas scan using NMAP, the correct command-line option is -sX, which sets the FIN, PSH, and URG flags in the TCP header.
The `nmap -sA` command performs an ACK scan, which is used to map firewall rulesets.
The `nmap -sP` command (or `-Pn` in newer versions) performs a ping scan for host discovery, not a port scan like Xmas.
The Nmap command `-sX` is specifically used to perform an Xmas scan, which sets the FIN, PSH, and URG flags in the TCP header to probe target ports in a unique manner often used to bypass certain firewalls.
The `nmap -sV` command is used for version detection, attempting to determine the service and version running on open ports.
Concept tested: Nmap scan types (Xmas scan)
Source: https://nmap.org/book/man-port-scanning-techniques.html
Topics
Community Discussion
No community discussion yet for this question.