Archive for February 13th, 2010

Idle scan or Zombie scanning as it is referred to sometimes, is the newest and stealthiest TCP scanning technique supported by the famous Nmap. What makes it quite interesting, is that an attacker can use it to scan a target and blame it on an innocent Zombie machine.
Before explaining how it can be done, let me start with a brief explanation of the Three-Way Handshake used to start TCP connections between any two computers.

Read the rest of this entry »