Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Securing Network Infrastructure

You're reading from   Securing Network Infrastructure Discover practical network security with Nmap and Nessus 7

Arrow left icon
Product type Course
Published in Mar 2019
Publisher
ISBN-13 9781838642303
Length 538 pages
Edition 1st Edition
Tools
Arrow right icon
Authors (2):
Arrow left icon
Sairam Jetty Sairam Jetty
Author Profile Icon Sairam Jetty
Sairam Jetty
Sagar Rahalkar Sagar Rahalkar
Author Profile Icon Sagar Rahalkar
Sagar Rahalkar
Arrow right icon
View More author details
Toc

Table of Contents (28) Chapters Close

Title Page
Copyright and Credits
About Packt
Contributors
Preface
1. Introduction to Network Vulnerability Scanning FREE CHAPTER 2. Understanding Network Scanning Tools 3. Port Scanning 4. Vulnerability Scanning 5. Configuration Audits 6. Report Analysis and Confirmation 7. Understanding the Customization and Optimization of Nessus and Nmap 8. Network Scanning for IoT, SCADA/ICS 9. Vulnerability Management Governance 10. Setting Up the Assessment Environment 11. Security Assessment Prerequisites 12. Information Gathering 13. Enumeration and Vulnerability Assessment 14. Gaining Network Access 15. Assessing Web Application Security 16. Privilege Escalation 17. Maintaining Access and Clearing Tracks 18. Vulnerability Scoring 19. Threat Modeling 20. Patching and Security Hardening 21. Vulnerability Reporting and Metrics 1. Other Books You May Enjoy Index

How to detect operating system


Nmap uses TCP/IP stack fingerprinting for OS detection.This is done by crafting custom TCP and UDP packets and analyzing their responses. After generating various such probes and comparing the results to the Nmap-os-db database of more than 2,600 known OS fingerprints and provides the OS version. The fingerprint provides details such as the vendor name, OS name, OS generation, device type, and also their Common Platform Enumeration (CPE) representation. Nmap also provides an option for the user to submit the fingerprint obtained if it is not present in the Nmap database of operating signatures:

  •  -O (Enable OS detection): This enables OS detection for an Nmap scan. This flag further has options that can be used in conjunction with it.
  • --osscan-limit: This option will reduce the scan time when a list of hosts is being scanned by skipping the hosts with no ports open for OS detection, thereby providing faster results for live hosts.
  • --osscan-guess; --fuzzy: If Nmap...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at R$50/month. Cancel anytime