Skip to main content

Day 7. 

What is missing from a half-open scan?

  • FIN
  • SYN-ACK
  • ACK
  • SYN
  • RST

ACK (the last ACK)


  • SYN-ACK

ACK


In an half-scan, what is missing is last ACK.

It’s used to avoid logging on scanned device by interrupting TCP handshake.

On nmap is “-sS” and it’s the default scan.


Comment