Hello, everyone.
So in this video we are going to see the Xmas scan.
The syntax of doing this scan is nmap hyphen
SX the target IP address
and the port number.
So this is another very steady scan that sets
all the TCP had a Flags to fin urge
and push.
Stealthily sneaks through stateless firewalls
and packet filters by turning on different TCP
Flags like fin urge and push.
However for non-window servers protected
by firewalls, this can be a way
to get through.
Remember the flags that are set in
Xmas can add fin urge and push.
The name given is as xmascan because
the packet lights up like a Christmas tree.
Take a note if a port is closed it replies
with the reset act and if it is open,
it replies within us and push.
So what happens as you can see on the left hand side
is the end map machine through which we are going to scan and
on the right hand side is the server which is going
to be get scanned.
The first request that is sent is fin push
and urge.
For that request if we receive a Reese attack, then
the port is marked as closed.
So, let's see the packet breakdown and understand what happens
in the background.
as you can see for port number 23
a packet has been sent and a reset act has
been received which says the port is marked as
closed.
So what are the advantages disadvantages of this type of scan?
The advantage is it is a still the scan and
can bypass some firewalls and packet filters.
The disadvantage is it is unreliable at
many times.
So, let's see the Practical of this type of scan and understand
better.
As you can see, this is the Wireshark.
packet analysis
now
first come on that I'm going to run is nmap hyphen
SX.
It stands for xmascam.
And material IP address and hyphen v as we
can see initiating xmascan.
Yes, we have got the output and you can
see all the three ports are marked as open and
filtered and the hostess up. So let's
see what happens in the background.
So as you can see for all this ports a
fin push and urgeward sent.
And we have received reset hack
for most of the packets.
thus
most of the ports are considered as closed for
this type of scan.
Thank you.