In this dynamic field of information security, Nmap stands all as the undisputed champion of the network
scanning tools with its cutting edge features extensive support for IP version six, a plethora of NSA
scripts, advanced configuration options and diverse scanning modes.
Nmap leaves other scanning trailing far behind.
Security researchers worldwide have contributed numerous ping and port scanning techniques to Nmap,
making it an indispensable asset for host and service discovery.
In this section we will explore the powerful ping scanning techniques offered by Nmap, enabling you
to perform a comprehensive scans and enhance your network security.
But first we will learn discover host with TCP synchronizing ping scans.
So one of the primary ping scanning techniques TCP syn here allows us to identify active hosts by sending
synchronized packets to target ports.
So by analyzing the response, you can determine the availability of hosts and their associated services.
For example, let's say we want to scan a subnet for a live host using the TCP synchronized scans.
We will do Nmap, uppercase P and S here, port 80 here, port 80, and here we will enter our IP address.
Zero 24 here and here we will get an and as you can see here, we saw in this scan this here.
So we also learned how to discover hosts with TCP EC ping scans, acknowledged ping scans.
So TCP ping scans takes advantage of the TCP protocol and acknowledgment mechanism to identify active
hosts.
So this technique sends EC and acknowledgment packets to specific ports and analyzes the response to
determine if a host is up or not.
So here's an example of using TCP ec.
EC ping scan.
So discover Host.
In order to do that, we will use an nmap here.
Nmap P uppercase P, a port 22 and here we will enter our IP address, target IP address.
In this case it's going to be my localhost 192.168..
Uh, here.
No, it was.
If config here.
So it was 13?
Yes.
The 13.0 and 24 here.
So we will scan only zeros here from 0 to 255.
And as you can see here, this is a close cache port.
This is our output here.
So here we will also learn in this section how to discover hosts with UDP ping scans.
So UDP ping scans probe target hosts by sending UDP packets to specific ports and examining the response.
So UDP scans are useful for discovering a host that may not respond to TCP based techniques.
So let's perform a UDP ping scan on a range of hosts, so we will use Nmap.
Nmap uppercase P port port, for example, 20 or 80 here.
So 192168 13 zero from from 0 to 200.
And here only works if you are root.
Of course we need to use because we need to read the root responses of the wire.
And here we will use the pseudo.
And now we will get an output.
So as you can see here, we scan their Mac addresses, their IP addresses, their open hosts.
So as you can see, it's filtered TCP port here and that's it.
And in this section, we will also learn how to discover hosts with ICMP ping scans.
So ICMP ping scans rely on the Internet control message protocol to determine if host is alive.
So by sending the ICMP echo requests and analyzing the responses, we can identify active hosts.
So consider this example here.
So we will use ICMP ping scans here.
So we will use uppercase P and uppercase E here and we will enter our IP address.
So 192168. 13.0 and 24 here and here you are not root using TCP ping scan rather than ICMP here.
So as you know, you will need to open sudo here to run proper icmp ping scan.
And now we are doing icmp ping scanning here.
So we will discover hosts with ICMP ping scan.
And as you can see here, we have their Mac addresses, their Mac, their network, their makers.
And here we have ports here, ICMP ports, as you can see here.
We got new ports here, Right.
And here in this section, we will also learn how to discover hosts with C.
S init ping scan.
So stp init ping scans utilize stream control transmission protocol as STP to identify live hosts and
by sending the sctp init packets and examining the responses we can determine host availability.
So here we will use Nmap uppercase P here and we will also enter the port.
In this case it's 80 here 192168 13.0 24 here.
So here of course we need to use sudo here.
So here as an example of using sctp init ping scans here.
As you can see, we got the whole different result here.
We have port state service again closed here and so on.
So here we have four hosts up here and we will in this lecture, in this section we will also learn
the more about the how to discover hosts with IP protocol ping scans.
So in order to do that, IP protocol, ping scans exploit various IP protocols, right.
Such as ICMP to detect active hosts.
So by sending IP protocol specific packets and analyzing the responses, we can identify hosts that
may not respond to the traditional ping techniques.
So in order to do that, we will use P here, P or here uppercase.
And after that we will enter our IP address, target IP address here.
So zero.
And 24.
And as you can see here, we also need to run it root here and here.
We will get there.
We will get an output here.
And as you can see here, this is our output for hosts are up here.
We have the services again and so on.
So we will also learn here how to discover hosts with pink scans, how to perform advanced pink scans.
We will also learn Discover hosts with broadcast Pink scans and so on.
So we will also learn scanning IP version six addresses, which adds IP version six Adoption grows.
It becomes crucial to adapt scanning techniques for these addresses as well.
We will learn spoofing the origin IP of a scan here to further obfuscate the scanning activity.
Enable Nmap enables the spoofing of the origin IP address.
We will also learn how to use port scanning for host discovery, while primarily known for its port
scanning capabilities.
Nmap can also aid in host discovery as well.
So by mastering the various ping scanning techniques offered by Nmap system, administrators and security
professionals can enhance their network security.
Understanding the inner workings of these techniques empowers administrators to harden their traffic
filtering rules, making their networks more secure.
Additionally, Nmap has advanced features and customization options enable users to adapt their scans
to overcome network restrictions and enhance stealth.
So embrace the power of Nmap to conduct comprehensive host discovery and fortify your network's defenses.