Practical Cyber Hacking Skills for Beginners - Firewall and IDS Evasion Techniques

The video tutorial discusses various techniques to evade firewalls and intrusion detection systems using Nmap. It covers packet fragmentation, using decoys, spoofing port numbers, and other advanced methods. The tutorial explains how these techniques can help in scanning networks stealthily and highlights the importance of using live IP addresses for decoys. It also touches on the limitations of these methods and the potential for detection by security admins.

Why does Nmap have a variety of options for scanning?

• To evade detection by firewalls and IDS

• To reduce network traffic

• To enhance scanning speed

• To increase the number of scanned ports

What is the purpose of using the -F option in Nmap?

• To use a specific port

• To scan faster

• To fragment packets

• To increase packet size

How can you specify custom packet sizes in Nmap?

• Using -G

• Using -D

• Using --mtu

• Using -F

What is the main advantage of using decoys in Nmap scans?

• To increase packet size

• To speed up the scan

• To make the scan appear to come from multiple IPs

• To reduce scan accuracy

What must be true about decoy IP addresses for them to be effective?

• They must be inactive

• They must be live and active

• They must be from a different network

• They must be from the same subnet

Which port number is commonly trusted by firewalls and can be used for spoofing?

• Port 443

• Port 22

• Port 53

• Port 80

What is the purpose of using the -G option in Nmap?

• To fragment packets

• To set a custom packet size

• To specify a decoy

• To specify a port number

What is a potential downside of using proxies for evasion?

• They increase scan speed

• They are easier to detect

• They are more effective than decoys

• They are slower than decoys

What is the purpose of the data string option in Nmap?

• To reduce packet size

• To specify a decoy

• To leave a message for the target

• To increase scan speed

In what scenario might the data string option be useful?

• When using a proxy

• When reducing packet size

• When increasing scan speed

• When scanning a colleague's network