OverviewStart here2 min
Scanning Networks
Find live hosts, open ports and the services behind them.
About this module
Footprinting (Module 2) gathered facts quietly. Scanning is the next step: actively sending packets to confirm which hosts are live, which ports are open, and what software is running. It is the first step a defender can detect, so this module teaches both the scan techniques and how defenders catch them.
What you will learn
- The six TCP flags and the 3-way handshake
- How to find live hosts on a network
- Port states and the main scan types
- Service, version and OS discovery
- Nmap and Hping3 basics
- How defenders detect and block scans
Module roadmap
01Network Scanning BasicsLesson 1 · ~4 min
02TCP Flags & the 3-Way HandshakeLesson 2 · ~5 min
03Host DiscoveryLesson 3 · ~4 min
04Port Scanning & Scan TypesLesson 4 · ~5 min
05Service, Version & OS DiscoveryLesson 5 · ~5 min
06Scanning ToolsLesson 6 · ~4 min
07Detecting Scans & EvasionLesson 7 · ~4 min
08Scanning CountermeasuresLesson 8 · ~4 min
09Lab: Scan Your Own LabLab · ~40 min
10AssessmentAssessment · ~5 min
How to study: read a lesson → answer its 2 "Check yourself" questions → do the lab → pass the assessment with 80%+. Lessons 2, 3 and 4 are the most tested. You will scan the Metasploitable VM from the Module 1 lab.