Please enable JavaScript.

Coggle requires JavaScript to display documents.

Recon - Coggle Diagram

- - - - proprietary software for OSINT
  - - - reveal what software is running on server and its behavior
    - - owner of files, GPS coords of images, file types
- - - - nslookup
      - dig
      - dnsrecon
- - - - know the important options
    - - nmap can scan range, hping can only port scan 1 IP
      - hping is lower level and stealthier
  - - - discover routers on path to target host
  - - - Tor
  - - - ping scan
      - ping sweep
    - - connect
        
        accurate, reliable, but logs and easily detectable
      - SYN
        
        "stealth", default, requires root, not as reliable
      - XMAS
        
        every option set,
      - IDLE
        
        blind port scanning, ultimate stealth scan, takes long, likely filtered
    - - no response = open or filtered behind FW