While performing the scanning phase of a penetration test, the penetration tester runs the following command: nmap -n -vv -sV -p- 10.10.10.23-28 After the Nmap scan is finished, the penetration…

The correct answer is B. -Pn. When Nmap reports all hosts as down, it usually means the hosts are blocking ICMP echo requests (pings) used for host discovery, not that they are actually offline. The -Pn (no ping / skip host discovery) flag tells Nmap to skip the host discovery phase entirely and assume all…

Information Gathering and Vulnerability Scanning

Question

While performing the scanning phase of a penetration test, the penetration tester runs the following command:

nmap -n -vv -sV -p- 10.10.10.23-28 After the Nmap scan is finished, the penetration tester notices all hosts seem to be down. Which of the following options should the penetration tester try NEXT?

Options

A-sU
B-Pn
C-sn
D-sS

How the community answered

(24 responses)

A
4% (1)
B
75% (18)
C
13% (3)
D
8% (2)

Explanation

When Nmap reports all hosts as down, it usually means the hosts are blocking ICMP echo requests (pings) used for host discovery, not that they are actually offline. The -Pn (no ping / skip host discovery) flag tells Nmap to skip the host discovery phase entirely and assume all target hosts are up, proceeding directly to port scanning. Without -Pn, Nmap won't scan hosts it believes are down. -sU (A) switches to UDP scanning. -sn (C) performs ping-only host discovery with no port scan. -sS (D) is a SYN stealth scan but still relies on host discovery unless -Pn is used.

Topics

#Nmap#Host Discovery#Port Scanning#Troubleshooting

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice