From the course: Security Testing: Nmap Security Scanning

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

TCP scanning with Nmap

TCP scanning with Nmap

- [Instructor] TCP ports are the most commonly used ports on many systems. TCP stands for the Transmission Control Protocol, and it's a networking protocol used to make connections between systems for a wide variety of services, including web servers, mail servers, and remote administrative connections. TCP is a highly reliable protocol that guarantees delivery. Now, Nmap has a variety of tricks up its sleeve when performing a TCP scan of a remote system, the most common technique is the TCP SYN scan. This approach is very fast and efficient. It sends a connection request to the remote server on the requested ports, and then listens for replies. It never actually completes the connection. You can run a TCP SYN scan by using the -sS flag with Nmap, and this is the default scan used when the user logged into the system has route administrative privileges. Let's try running a TCP SYN scan against one of the systems on my…

Contents