Feb
18
2013

Idle Scanning with hping2

hping is a TCP/IP packet assembler/analyzer. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.

A subset of the stuff you can do using hping:

  • Firewall testing
  • Advanced port scanning
  • Network testing, using different protocols, TOS, fragmentation
  • Manual path MTU discovery
  • Advanced traceroute, under all the supported protocols
  • Remote OS fingerprinting
  • Remote uptime guessing
  • TCP/IP stacks auditing
  • hping can also be useful to students that are learning TCP/IP.

Hping works on the following unix-like systems: Linux, FreeBSD, NetBSD, OpenBSD, Solaris, MacOs X and Windows.

 

Idle scanning

hping2 -c 10 -S --spoof 192.168.1.11 -p 80 192.168.1.15

 

-c 10 – send 10 packets
-S – Syn scan
–spoof 192.168.1.11 – spoof from ip address 192.168.1.11
-p 80 – target port
192.168.1.15 – target ip address

Tags: , ,

This entry was posted on Monday, February 18th, 2013 at 21:43 and is filed under Firewall, Host discovery, Network, Port Scanning. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

«
»

Leave a Reply


+ eight = 13