nmap

Keywords: nmap, port scanning, host discovery, os fingerprinting, firewall, ids

nmap (Network MAPper) is a network port scanner with service version and operating system detection engines. The tool was originally developed by fyodor and published in Phrack Issue 51 in 1997. The tool is command line although a number of GUIs exist. nmap runs on a variety of platforms including Linux, *BSD, Windows, and others.

hping

Keywords: port scanning, host discovery, os fingerprinting, hping, backdoor, denial of service, covert channel

hping is a TCP/IP packet forging tool with embedded Tcl scripting functionality. Developed by antirez in 1998, it is now in its 3rd release. The tool runs on all major operatings systems including Linux, *BSD, and Windows.

Scapy

Keywords: tcp, icmp, udp, syn, ack, scapy, port scanning, host discovery, os fingerprinting, wireless, sniffing

Scapy is a packet forging tool using Python as its domain specific language. It was developed by Philippe Biondi n 2003

Host Discovery

Keywords: reconnaissance, tcp, icmp, udp, syn, ack, fin, xmas, null, ping, arp, ip, dns, host discovery

This section covers various approaches to discovery of network connected hosts.