GPEN · Question #356
As a professional hacker, you want to crack the security of secureserver.com. For this, in the information gathering step, you performed scanning with the help of nmap utility to retrieve as many…
The correct answer is D. nmap -sO. The nmap -sO switch performs an IP protocol scan, enumerating which IP-layer protocols (TCP, UDP, ICMP, etc.) are supported by the target host.
Question
As a professional hacker, you want to crack the security of secureserver.com. For this, in the information gathering step, you performed scanning with the help of nmap utility to retrieve as many different protocols as possible being used by the secureserver.com so that you could get the accurate knowledge about what services were being used by the secure server.com. Which of the following nmap switches have you used to accomplish the task?
Options
- Anmap -sT
- Bnmap -sS
- Cnmap -vO
- Dnmap -sO
How the community answered
(18 responses)- A11% (2)
- C6% (1)
- D83% (15)
Why each option
The nmap -sO switch performs an IP protocol scan, enumerating which IP-layer protocols (TCP, UDP, ICMP, etc.) are supported by the target host.
nmap -sT performs a full TCP connect scan that completes the 3-way handshake on TCP ports only, and does not enumerate IP protocols.
nmap -sS performs a TCP SYN (stealth) scan that sends half-open SYN packets to identify open TCP ports, and does not scan for IP protocols.
nmap -vO is not a dedicated protocol scan switch; -v increases verbosity and -O attempts OS detection based on TCP/IP stack fingerprinting, which is different from enumerating supported IP protocols.
The nmap -sO flag triggers an IP protocol scan, which iterates through all 256 possible IP protocol numbers and identifies which ones the target accepts by analyzing ICMP protocol-unreachable responses. This reveals not just open ports but the full set of IP-level protocols in use, giving a broader picture of network services than a standard port scan.
Concept tested: Nmap IP protocol scan using -sO switch
Source: https://nmap.org/book/scan-methods-ip-protocol-scan.html
Topics
Community Discussion
No community discussion yet for this question.