TCP, Skåne.
So in our previous lessons, we discussed the DCPI scan by default and MAP always performs TCP scans
unless otherwise specified.
So let's take a closer look at a TCP scan within Matt.
And Matt sends a sin packet to the target system.
And the target system receives the packet and sends the Sinak packet to the end map computer.
Which receives and map packet and sends the packet to complete the connection.
The destination system port sends the port information that is open.
Then Map terminates the connection by sending a reset packet immediately.
So to scan TCP with and map, we need to add the S-T parameter to the unmap command.
I'll give you an example, we'll scan the TCP top 20 on the meds voidable server that we install.
So open virtual box, open, carry, Linux, open, Métis voidable.
And in Calli Linux VM.
I open up terminal and write the command and map 10 zero to four top ports, 20 press enter.
And the results of the scan are right here.
So let's have a look, as you can see, the top 20 ports were scanned and it was the result.
TCP and since scan difference.
So, yeah, OK, so what are the differences between the skin scan and the TCP scan?
Right here acin scan three way handshake does not complete.
The teacup scan, the three way handshake is complete.
The skin scan, if the Sinak packet arrives, the connection is terminated with Resat.
And on a TCP scan of the Sinak packet arrives, the connection is completed with the packet.
And since can since Ganzer usually not logged on the server.
TCP scan are logged on the server.
Since scans require root authority because there was interference in the packages.
A TCP scan does not require any privileges because it uses the TCP Connect method.