1
Q
Flag
A
Description
2
Q
-sn
A
Host discovery scan (ping sweep)
3
Q
-sL
A
List scan, show IPs and hostnames only
4
Q
-PS <port></port>
A
TCP SYN ping on specific ports
5
Q
-PA <port></port>
A
TCP ACK ping
6
Q
-PU <port></port>
A
UDP ping
7
Q
-sY
A
SCTP INIT ping
8
Q
-Pn
A
Treat all hosts as up (skip discovery)
9
Q
-sS
A
TCP SYN (half-open) scan
10
Q
-sT
A
TCP connect (full handshake) scan
11
Q
-sN
A
Null scan (no flags set)
12
Q
-sF
A
FIN scan
13
Q
-sX
A
Xmas scan (FIN+PSH+URG flags)
14
Q
-sU
A
UDP scan
15
Q
-sI
A
Idle (zombie) scan
16
Q
-p
A
Specify port(s) or port range
17
Q
-f / –mtu
A
Fragment packets to bypass IDS/IPS
18
Q
–scan-delay <time></time>
A
Delay between probes for stealth
19
Q
-T<0–5>
A
Timing template (0=paranoid, 5=insane/fast)
20
Q
-sV
A
Detect service versions
21
Q
-A
A
Aggressive scan (OS, version, script, traceroute)
22
Q
-O
A
OS detection
23
Q
-oN
A
Normal output file
24
Q
-oX
A
XML output
25
-oG
Grepable output
Pentest
flashcards
Decks in class (7)
# Cards
