Find Active Information Collection - The story found arping

Data link layer (ARP): scanning speed, but only in the same network segment scan.

arping command:

-c  only send count requests

-d find duplicate replies Duplicate IP addresses

Host found:

arping -c 1 192.168.1.1

# If the host survive, it will return to its MAC address

 

arping -d 192.168.1.1 if repeated response, ARP gateway spoofing may occur, stealing traffic, man in the middle attacks

About two-story shell instance found under View arping.sh find directories and arping2.sh

 

namp command

Advantages: may scan a network

-sn only host discovery, port scanning without

namp -sn 192.168.1.0/24 to 192.168.1.1-254 scanning survival host and perform DNS PTR reverse lookup

 

Guess you like

Origin www.cnblogs.com/unknownguy/p/11570103.html