Stealth scanning is a form of TCP scanning. Here the port scanner creates raw IP packets and sends them to the host to monitor for responses. This type of scan is also known as half-open scanning, or SYN scanning, as it never opens a complete TCP connection. This type of scanner creates a SYN packet and sends it to the host. If the target port is open, the host will respond with a SYN-ACK packet. Then the client will respond with an RST packet to close the connection before completing the handshake. If the port is closed but unfiltered, the target will instantly respond with an RST packet.
To create a SYN scanner, we will use the Scapy module. It is a powerful interactive packet manipulation program and library.
