Which command would perform a SYN scan on port 80 toward 10.0.0.25?

Which command would perform a SYN scan on port 80 toward 10.0.0.25?

• A. hping3 -S 10.0.0.25 -p 80
• B. hping3 -A 10.0.0.25 -p 80
• C. hping3 -1 10.0.0.25
• D. hping3 -2 10.0.0.25 -p 80

Answer: (A)

SYN scan means sending TCP packets with the SYN flag set to probe a port and observe the response to determine if the port is open, closed, or filtered. In hping3, you craft that probe by enabling the SYN flag and specifying the destination port and target address. So, sending hping3 -S 10.0.0.25 -p 80 performs a SYN probe to port 80 on 10.0.0.25, allowing you to infer the port’s state from the reply (SYN-ACK typically means open, RST usually means closed, no response or ICMP/filters suggest blocked). The other options use different flags or transport protocols (for example, -A sends a TCP ACK instead of a SYN probe, -1 switches to ICMP mode, and -2 uses UDP), so they aren’t performing a TCP SYN scan.

SYN scan means sending TCP packets with the SYN flag set to probe a port and observe the response to determine if the port is open, closed, or filtered. In hping3, you craft that probe by enabling the SYN flag and specifying the destination port and target address. So, sending hping3 -S 10.0.0.25 -p 80 performs a SYN probe to port 80 on 10.0.0.25, allowing you to infer the port’s state from the reply (SYN-ACK typically means open, RST usually means closed, no response or ICMP/filters suggest blocked). The other options use different flags or transport protocols (for example, -A sends a TCP ACK instead of a SYN probe, -1 switches to ICMP mode, and -2 uses UDP), so they aren’t performing a TCP SYN scan.