You send SYN packets with the exact TTL of the target system starting at port 1 and going up to port 1024 using hping2 utility. This attack is known as __________.

Standard port scanning probes ports for open or closed status without using TTL manipulation to infer firewall rule sets.

Cloaking refers to techniques that hide an attacker's identity or presence, not a method of mapping network filtering rules.

Firewalking is a reconnaissance technique that sends packets with TTL values set to expire one hop past the target gateway, using the resulting ICMP TTL-exceeded responses to determine which ports are permitted through the firewall. Using hping2 to sweep ports 1-1024 with the exact TTL of the target system is the classic firewalking methodology for enumerating firewall access control rules.

Spoofing involves falsifying source addresses or identities in packets, not leveraging TTL fields to enumerate firewall-permitted ports.