Scanning

3 categories:

• Port Scan
• Network Scan
• Vulnerability Scan

Checking for live systems:

• Wardialling
• Wardriving
• Pinging
• Port Scanning

OS Active and Passive Fingerprinting:

• Active = Nmap
• Passive = TTL Value from sniffing

Banner Grabbing:

To determine information about servives running on a system ( use Telnet)

Vulnerability Scanners:

• Nessus
• OpenVAS
• Nexpose
• Retina

Mapping:

• Mapping of networks

Proxies:

• Use proxies
• Tor
• VPNs