Original subtitles

1

UDP scan

2

so we in our previous lessons we discussed the UDP scan.

3

Most of the services that are popular in server systems run over DCP protocol.

4

However UDP services are also widely used so DNS.

5

Port 53 as an MP ports 161 and 162 and DHL GP port 67 and 68 are the most commonly used services UDP

6

scanning is generally slower and it's more difficult than DCP scanning so for this reason some security

7

controllers kind of ignore these ports extensible UDP services are common therefore this is an error

8

because attackers do not ignore the entire protocol so in order to scan UDP within map we will need

9

to add the as you parameter to the map command.

10

And it can be combined with a DCP scan type just as the Sen scan as s to control both protocols using

11

the same scan.

12

Sound good a UDP scan works by sending a UDP packet to each targeted port and for most ports this packet

13

will be empty.

14

That means no load but a protocol specific data payload will be sent for several of the more common

15

ports now for different situations can occur when we scan UDP with an map and these will be open status.

16

That's when any map sends UDP packet to the target system.

17

If the UDP response is sent from the destination system that means that the destination port is open

18

and a closed status.

19

So when map sends a UDP packet to the target system and if the ICMP port from the destination system

20

sends an unreachable error response that just means that the destination port is closed an operation

21

cannot be performed filtered status and map sends a UDP packet to the target system and if the ICMP

22

sends unreachable areas from the target system the destination port is filtered to the port is open

23

but it cannot be operated.

24

It's likely that security software is being audited by open filtered condition and map sends a UDP packet

25

to the target system and if there is no response from the target system for a certain period and map

26

accepts this port as open filtered that just means it cannot decide whether the port is open or closed

27

but still an operation cannot be performed.

28

So now let's do a simple UDP scan here's the example.

29

We'll do a UDP top 10 port scan on the Metis portable server we install to we open a virtual box open

30

Kelly Linux open meadows loyal and log in Kelly Linux VM and open up terminal and write this command

31

and map and zero to two to four as you top port 10 reason as V and press enter and there are your scan

32

results.

33

So as you can see that time is too long for the DCP scan and map UDP scan the top 10 ports listed the

34

results.