Original subtitles

1

Since scanning and map s as target IP command is the most commonly used form of scanning and then map

2

course if we do not give a parameter while scanning and map will always scan DCP so the scan uses the

3

ever mentioned three way handshake system since scan is faster and less detectable than a DCP scan.

4

Because in this scan the connection is terminated before it's fully established.

5

However you should also remember that they may be detected by next generation firewalls and security

6

software I'll show you how this scan works So step 1 and map will send a send packet to the scan port

7

of the target computer.

8

Step to the computer receiving this response will send a sin ACH Step 3 after receiving this answer

9

and map does not send the Act packet from the computer that we're scanning to complete the connection.

10

Instead it sends a reset packet

11

so that way the possibility of logging is reduced and our speed increases as there is not a full connection.

12

Now this type of scan is especially useful for systems that use firewalls.

13

That way the status of the corresponding port of the target is determined

14

since scanning comments are made according to the answers received.

15

So when a since scan is performed the following answers can be received from the target system.

16

The port open status zone map sends us in packet to the destination and the destination system sends

17

this an egg packet and map terminates that connection by sending a recent packet instead of sending

18

an act packet that indicates that the port is open and accessible and that the port accepts DCP or UDP

19

connection port closed status and map sends the sin packet to the destination and the destination system

20

sends a reset message instead of the Sinek back at and then terminates the connection and in this case

21

the board is accessible but cannot be processed

22

now about the port filtered stats so two kinds of answers can be received here on the map side first

23

the UN map sends a sin packet to the target system and no response is received from the target system

24

when that happens it is not commented whether the port on the target system is open or closed then secondly

25

and map sends a send packet to the target system and the destination system sends the ICMP unreachable

26

error packet so then in this case the port is accessible but it's not known whether it's open or closed.