Book Image

Practical Network Scanning

By : Ajay Singh Chauhan
Book Image

Practical Network Scanning

By: Ajay Singh Chauhan

Overview of this book

Network scanning is the process of assessing a network to identify an active host network; same methods can be used by an attacker or network administrator for security assessment. This procedure plays a vital role in risk assessment programs or while preparing a security plan for your organization. Practical Network Scanning starts with the concept of network scanning and how organizations can benefit from it. Then, going forward, we delve into the different scanning steps, such as service detection, firewall detection, TCP/IP port detection, and OS detection. We also implement these concepts using a few of the most prominent tools on the market, such as Nessus and Nmap. In the concluding chapters, we prepare a complete vulnerability assessment plan for your organization. By the end of this book, you will have hands-on experience in performing network scanning using different tools and in choosing the best tools for your system.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

IP spoofing


IP spoofing is the creation of IP packets using somebody else's IP address as the source address of an IP packet.

Let's take a look at IP headers in an IP packet:

In the following diagram, the attackers represent someone else's IP address:

Anti-spoofing using access lists

A network operator can implement an anti-spoofing access-list filter to prevent packets with incorrect source IP addresses from entering and leaving the network. With the following command, the access list will prevent incoming packets that have the internal IP address from coming in. 220.x.x.x is a network which I own, so I do not expect to encounter any packets coming from outside my own IP address.

Cisco IOS command:

access-list 101 deny 220.x.x.0 0.0.0.255 any

Encryption

Another possible way to prevent IP spoofing is to encrypt all network traffic to prevent source and destination hosts from being compromised.

Anti-spoofing using RPF checks

RPF is a feature with multi vendor support to prevent IP spoofing. It can...