資源描述:
《Nmap -- Network Security Scanner.doc》由會員上傳分享,免費在線閱讀,更多相關(guān)內(nèi)容在教育資源-天天文庫。
1、Nmap--NetworkSecurityScanner0360592Project2AhsaanArefeenSrabantiDeyMingyueYuInstructor:Dr.A.Aggarwal38ContentsI.Introduction……………………………………………………………2II.OptionObservation…………………………………………………….4II.1Scantype..…………………………………………………………....4-sT………………………………………………………………….4-sS………………………………………………………………….6-sF……
2、…………………………………………………………….8–sX…………………………………………………………………9-sN………………………………………………………………...11-sP…………………………………………………………………16-sO-sA-sWII.2Generaloption-PT-PS-PI-O-I-v-h-p-F-MIII.Conclusion38I.IntroductionNmapisanetworkexplorationtoolandsecurityscanner.Itisdesignedtoallowsystemadministratorsandcuriousindi
3、vidualstoscanlargenetworkstodeterminewhichhostsareupandwhatservicestheyareoffering.Nmapsupportsalargenumberofscanningtechniquessuchas:UDP,TCPconnect(),TCPSYN(halfopen),ftpproxy(bounceattack),Reverse-ident,ICMP(pingsweep),FIN,ACKsweep,XmasTree,SYNsweep,IPProtocol,andNullscan.nmapalsooffersanumber
4、ofadvancedfeaturessuchasremoteOSdetectionviaTCP/IPfingerprinting,stealthscanning,dynamicdelayandretransmissioncalculations,parallelscanning,detectionofdownhostsviaparallelpings,decoyscanning,portfilteringdetection,direct(non-portmapper)RPCscanning,fragmentationscanning,andflexibletargetandportsp
5、ecification.Theresultofrunningnmapisusuallyalistofportsonthemachinebeingscanned.Nmapalwaysgivestheport's"wellknown"servicename,number,state,andprotocol.Thestateiseither'open','filtered',or'unfiltered'.Openmeansthatthetargetmachinewillaccept()connectionsonthatport.Filteredmeansthatafirewall,filte
6、r,orothernetworkobstacleiscoveringtheportandpreventingnmapfromdeterminingwhethertheportisopen.Unfilteredmeansthattheportisknownbynmaptobeclosedandnofirewall/filterseemstobeinterferingwithnmap'sattemptstodeterminethis.Unfilteredportsarethecommoncaseandareonlyshownwhenmostofthescannedportsareinthe
7、filteredstate.Dependingonoptionsused,nmapmayalsoreportthefollowingcharacteristicsoftheremotehost:OSinuse,TCPsequenceability,usernamesrunningtheprogramswhichhaveboundtoeachport,theDNSname,whetherthehostisasmurfaddress,andafew