Module III Scanning.Scanning - DefinitionScanning is one of the three components of intelligence

Scanning

Module III

Scanning - Definition

Scanning is one of the three components of intelligence gathering for an

attacker

The attacker finds information about

the:

• Specific IP addresses

• Operating Systems

• System architecture

• Services running on each computer

The various types of scanning

are as f ll o ows:

Port

Scanning

Network

Scanning

Vulnerability

Scanning

Types of Scanning

Port Scanning

• A i f b i b k A series

of messages sent b

y someone attempting to break

into a computer to learn about the computer’s network

services

• Each associated with a "well-known" port number

Network Scanning

• A

p yg rocedure for identifyin

g active hosts on a network

• Either for the purpose of attacking them or for network

security assessment

Vulnerability Scanning

• The automated process of proactively identifying

vulnerabilities of computing systems present in a network

Objectives of Scanning

To detect the live s

y g stems runnin

g on the network

T

o o po / g disc

over which ports are active

/runnin

g

To discover the operating system running on the target system

(fi i i ) (fingerprinting

)

To discover the services running/listening on the target system

To disco er the IP address of the target s stem To disco

ver the IP address of the target s

ystem

Checking y for Live Systems

Checking for Live Systems - ICMP

Scanning

In this type of scanning, it is found out which hosts are up in a

net ork b pinging them all net

work b

y pinging them all

ICMP scanning can be run parallel so that it can run fast

It can also be helpful to tweek the ping timeout value with the –t

o

ption

Angry IP Scanner

An IP scanner for Windows

Can scan IPs in an

y g ran

g

e

It simply pings each IP address to check if it is alive

Provides NETBIOS information such as:

• Computer name

• Workgroup name

• MAC address