Explain web security : Working with NMap

This video tutorial covers the basics of Nmap, a powerful open-source tool for port scanning. It explains the TCP three-way handshake, the significance of network ports, and how to use Nmap's command line version with various switches and options. The tutorial includes demonstrations using Kali Linux and Metasploitable2, highlighting how to identify live targets, open ports, and potential vulnerabilities. It emphasizes the importance of understanding Nmap's capabilities and encourages further exploration of its documentation.

What is the primary purpose of Nmap?

• To create network firewalls

• To scan ports and identify live hosts

• To encrypt network traffic

• To manage network bandwidth

Which flag is used to initiate a TCP three-way handshake?

• FIN

• ACK

• SYN

• RST

What is the range of network ports?

• 1 to 1024

• 1 to 65535

• 1024 to 49151

• 49152 to 65535

Which port is commonly used for Secure Shell (SSH)?

• Port 21

• Port 80

• Port 443

• Port 22

What does the Nmap switch '-sS' signify?

• A full TCP connect scan

• A SYN scan

• A Christmas tree scan

• A ping scan

Which Nmap scan is known for setting all flags and is referred to as a Christmas tree scan?

• -PT

• -sA

• -sP

• -sX

What is the purpose of using a timing template in Nmap?

• To specify the target IP address

• To change the scan type

• To adjust the speed of the scan

• To encrypt the scan results

In the Nmap demonstration, what is the significance of using the '-A' option?

• To enable OS and version detection

• To disable all flags

• To increase scan speed

• To perform a stealth scan

Why might one choose a slower timing template during an Nmap scan?

• To avoid detection by security devices

• To increase the number of open ports detected

• To ensure all flags are set

• To reduce the scan's memory usage

What information can be gathered from an Nmap scan regarding services?

• The version of the services running

• The number of users connected

• The physical location of the server

• The encryption method used