Which hping3 command performs a FIN, PUSH and URG scan on port 80?

Which hping3 command performs a FIN, PUSH and URG scan on port 80?

• A. hping3 -F -P -U 10.0.0.25 -p 80
• B. hping3 -1 10.0.0.25
• C. hping3 -S 72.14.207.99 -p 80 --tcp-timestamp
• D. hping3 -2 10.0.0.25 -p 80

Answer: (A)

This question hinges on crafting a TCP packet with specific flags to perform a FIN-PUSH-URG scan on a target port. In hping3, you can set individual TCP flags with dedicated options: -F sets FIN, -P sets PUSH, and -U sets URG. Combining all three flags (-F -P -U) creates a FIN+PUSH+URG packet, often referred to as a FIN-PSH-URG (Xmas-like) probe. Targeting port 80 with -p 80 and sending this to the destination IP 10.0.0.25 results in a scan that asks how the host responds to this unusual packet, which can reveal open versus closed states behind network defenses. The other commands do not achieve this specific flag combination. One uses ICMP mode (-1), which sends an ICMP Echo Request rather than a TCP packet with FIN, PUSH, and URG flags. Another sets only the SYN flag (-S) and includes a timestamp option, which does not create the FIN-PUSH-URG probe. The UDP mode (-2) sends UDP packets, not TCP packets with the requested flags.

This question hinges on crafting a TCP packet with specific flags to perform a FIN-PUSH-URG scan on a target port. In hping3, you can set individual TCP flags with dedicated options: -F sets FIN, -P sets PUSH, and -U sets URG. Combining all three flags (-F -P -U) creates a FIN+PUSH+URG packet, often referred to as a FIN-PSH-URG (Xmas-like) probe. Targeting port 80 with -p 80 and sending this to the destination IP 10.0.0.25 results in a scan that asks how the host responds to this unusual packet, which can reveal open versus closed states behind network defenses.

The other commands do not achieve this specific flag combination. One uses ICMP mode (-1), which sends an ICMP Echo Request rather than a TCP packet with FIN, PUSH, and URG flags. Another sets only the SYN flag (-S) and includes a timestamp option, which does not create the FIN-PUSH-URG probe. The UDP mode (-2) sends UDP packets, not TCP packets with the requested flags.