Hello, everyone.
So in this video we are going to see and map bogus
fragment scan.
So the syntax of doing this scan is very simple. It is
nmap the target IP address followed by hyphen f
which will send bogus or
less number of fragments for
the particular packet.
So specifically our Command utilizes 16 bytes
per fragment which diminishes the
number of fragments when we use hyphen. F
fragmented packet is one of them and
consisting in sending several tiny packets
instead of one normal size of packet.
This type of scan is useful for a
wearing the firewalls.
And not getting detected.
You can always add hyphen V to see the output inverse mode.
The example of doing this scan is added over here. It
is nmap. The target IP address followed
by hyphen f
so it is the Practical time and let's see how you can use
a fragment scan.
To change or diminish the number of fragments into
the packets.
I have this command which I'm going to run onto
my terminal.
I will just paste this and I will hit enter.
I also started Wireshark to capture the
request as you can see. I've identified Port 22
is open 1021 is closed.
So, let's see the packet that we have captured over here
as you can see 22, 22 22. These
are the packets but in this packets if
we see the length of the packet
fragment, then the packet are
being sent into smaller number of chunks a
break broken number of chunks instead of one single
packet.
If you check the packet size
of that particular request, then
you will come to know that the size
in the bytes have been reduced. This
is because we send it
the packet into a fragment format.
So this way
you can scan a particular Target by giving hyphen
f
flag and doing the fragment scan
through which end map will send those particular
packets in the form of chunks.
So I hope you guys understood how you can use this type of
scan.
Remember nowadays this time of
scans is generally detected by firewalls because
they do not like if any
Target is sending request in
the form of chunks or fragments what
you can still try running.
This particular scan on servers, which do
not have latest versions or firewalls
implemented.
Through which you can easily bypass the scans.
I hope you guys understood. Thank you.