Another type of scanning that doesn't reveal her identity is passive scanning it exploits the fact that
as we've mentioned before every TCAP IP stack implementation is a little different.
The time to live attribute of the IP protocol is one example.
Different operating systems set different initial values of this attribute windows said that 128 Linux
64 we can check the value of the TTL attribute and learn something about the computer which sent the
packet.
This is true in regards to many other protocols and their attributes.
By passive scanning it is merely listening to the data we are able to obtain crucial information about
the targets operating system.
This is how the lbf program works.
Shortly we will see the program in action
attackers always choose the easiest target to find the easiest target check whether somebody has made
basic configuration mistakes.
You can do that by vulnerability scanning tools such as Ness's scanner which are designed to perform
security level analysis can be used also to check the system's vulnerability to attacks.
The program includes a database of all known security bugs in various kinds of software.
It can perform a remote computer scan looking for security gaps that would match any description in
its database.
This is used primarily to scan web servers because they are being accessed remotely via the Internet
all the time.