Which hping3 command is used to collect the initial sequence number?

Which hping3 command is used to collect the initial sequence number?

• A. hping3 192.168.1.103 -Q -p 139 -s
• B. hping3 -1 10.0.0.25
• C. hping3 -A 10.0.0.25 -p 80
• D. hping3 -8 50-60 -S 10.0.0.25 -V

Answer: (A)

Collecting the initial sequence number relies on having the tool report the sequence value that the target chooses in its TCP response. The option that enables this reporting is -Q, which instructs the tool to display the initial sequence number from the target’s reply to a crafted TCP packet. So a command that targets a host on a specific port and uses -Q is the one designed to reveal that ISN. The other options aren’t focused on TCP sequence numbers: the ICMP mode sends non-TCP traffic, which won’t provide a TCP ISN; using ACK or SYN flags without a reporting option won’t reveal the ISN; and a fragmented SYN with verbose output doesn’t inherently display the initial sequence number.

Collecting the initial sequence number relies on having the tool report the sequence value that the target chooses in its TCP response. The option that enables this reporting is -Q, which instructs the tool to display the initial sequence number from the target’s reply to a crafted TCP packet. So a command that targets a host on a specific port and uses -Q is the one designed to reveal that ISN.

The other options aren’t focused on TCP sequence numbers: the ICMP mode sends non-TCP traffic, which won’t provide a TCP ISN; using ACK or SYN flags without a reporting option won’t reveal the ISN; and a fragmented SYN with verbose output doesn’t inherently display the initial sequence number.