Hack Forums
Help with Nmap Idle Scan - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Help with Nmap Idle Scan (/showthread.php?tid=6106164)



Help with Nmap Idle Scan - ThinWhiteDuke - Aug 30, 2020

I’m looking for some help or advise with the Idle Scan, I get the process but where I’m not understanding is the part where I send a spoof Scan to the Target making it appear to come from the Zombie, Is there an Nmap command for this like for example the Syn Scan sS ?
Thanks


RE: Help with Nmap Idle Scan - Argonaut.exe - Aug 30, 2020

(Aug 30, 2020 09:37 AM)ThinWhiteDuke Wrote:  I’m looking for some help or advise with the Idle Scan, I get the process but where I’m not understanding is the part where I send a spoof Scan to the Target making it appear to come from the Zombie, Is there an Nmap command for this like for example the Syn Scan sS ?
Thanks


Code
Nmap -Pn -sI ZombieIp/domain  targetIP/domain

If you need a specific port from the zombie just add :portnumber

Ie
Code
nmap -Pn -sI zombie.com:80 target.com

If i remember correctly there is also a metasploit auxiliary about that


RE: Help with Nmap Idle Scan - ThinWhiteDuke - Aug 30, 2020

Thanks for the quick reply