GSEC · Question #341
Use nmap to discover a host on the 10.10.10.0/24 network, scanning only port 8082 and using the SYN or Stealth scan approach. Which host has a service called -blackice-alerts"?
The correct answer is F. 10.10.10.164. An nmap SYN (stealth) scan on port 8082 across the /24 network identifies 10.10.10.164 as the host running the blackice-alerts service.
Question
Use nmap to discover a host on the 10.10.10.0/24 network, scanning only port 8082 and using the SYN or Stealth scan approach. Which host has a service called -blackice-alerts"?
Exhibit
Options
- A10.10.10.115
- B10.10.10.80
- C10.10.10.5
- D10.10.10
- E10.10.10.30
- F10.10.10.164
- G10.10.10.37
- H10.10.10.20
- I10.10.10.7
How the community answered
(42 responses)- A2% (1)
- C2% (1)
- D7% (3)
- F79% (33)
- I10% (4)
Why each option
An nmap SYN (stealth) scan on port 8082 across the /24 network identifies 10.10.10.164 as the host running the blackice-alerts service.
10.10.10.115 does not have port 8082 open or does not respond with the blackice-alerts service identifier during the scan.
10.10.10.80 does not have port 8082 open or the blackice-alerts service running on that port.
10.10.10.5 does not present port 8082 as open with the blackice-alerts service label.
10.10.10 is not a valid host address - it is missing the final octet and cannot be a scan target.
10.10.10.30 does not have port 8082 open with the blackice-alerts service identifier.
Running 'nmap -sS -p 8082 10.10.10.0/24' sends TCP SYN packets to port 8082 on every host in the subnet; the results show 10.10.10.164 has port 8082 open and nmap identifies the service as 'blackice-alerts', a service name registered to that port in the nmap services database. The SYN scan is stealthy because it never completes the TCP three-way handshake, reducing the chance of detection by intrusion detection systems.
10.10.10.37 does not have port 8082 open or running the blackice-alerts service.
10.10.10.20 does not have port 8082 open with the blackice-alerts service.
10.10.10.7 does not have port 8082 open or the blackice-alerts service detected on that port.
Concept tested: nmap SYN stealth scan on specific port
Source: https://nmap.org/book/synscan.html
Topics
Community Discussion
No community discussion yet for this question.