Certified Ethical Hacker CEH · Free Practice Question Medium
Question 58
Which flags are sent with the packets in TCP Maimon scan?
- A A. FIN/ACK
- B B. URG,PUSH,FIN
- C C. ACK
- D D. SYNC
Reveal correct answer
Correct answer: A
Explanation
Correct Answer: A. FIN/ACK Explanation: The Maimon scan is a type of port scanning technique named after Uriel Maimon who discovered it. It was described in Phrack Magazine issue #49 (November 1996) and was later included in Nmap. The Maimon scan is similar to the NULL, FIN, and Xmas scans except that it uses a FIN/ACK probe instead of a NULL, FIN or Xmas probe. According to the rules for TCP protocol, when a FIN/ACK probe is sent, a RST packet should be generated by the receiving system in response, whether the port is open or closed. However, Uriel noticed that many BSD-derived systems (such as FreeBSD and NetBSD) simply drop the packet if the port is open instead of responding with a RST packet. This behavior can be used to detect open ports on BSD-derived systems using the Maimon scan.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
