nerdexam
GIAC

GCIH · Question #465

An administrator needs to repeatedly scan a very large network with thousands of hosts, what is the best way of accomplishing this very quickly?

The correct answer is C. Masscan. Masscan is purpose-built for extremely high-speed port scanning and is the correct tool when the goal is to scan thousands of hosts as quickly as possible.

Reconnaissance, Scanning, and Enumeration

Question

An administrator needs to repeatedly scan a very large network with thousands of hosts, what is the best way of accomplishing this very quickly?

Options

  • ANessus
  • BNmap
  • CMasscan
  • DHping3

How the community answered

(25 responses)
  • A
    4% (1)
  • C
    92% (23)
  • D
    4% (1)

Why each option

Masscan is purpose-built for extremely high-speed port scanning and is the correct tool when the goal is to scan thousands of hosts as quickly as possible.

ANessus

Nessus is a credentialed vulnerability and configuration scanner that performs deep per-host checks - it is not designed for raw speed across thousands of hosts and would be far too slow for this use case.

BNmap

Nmap uses the host OS network stack and is feature-rich and accurate, but its architecture does not scale to scanning thousands of hosts quickly - it is significantly slower than Masscan for large sweeps.

CMasscanCorrect

Masscan uses an asynchronous, stateless TCP/IP stack that bypasses the operating system's network stack, allowing it to transmit millions of packets per second. It can scan the entire IPv4 internet in under six minutes at maximum rate, making it far superior to other tools for rapidly sweeping very large address spaces. Its design is explicitly optimized for speed and scale, unlike Nmap which prioritizes accuracy and feature richness.

DHping3

Hping3 is a packet crafting and testing tool used for firewall testing, tracerouting, and crafting custom packets - it has no built-in scanning engine suitable for rapidly scanning large networks.

Concept tested: High-speed large-scale network scanning with Masscan

Source: https://github.com/robertdavidgraham/masscan

Topics

#Masscan#network scanning#host discovery#scanning tools

Community Discussion

No community discussion yet for this question.

Full GCIH Practice