Implementation and vulnerability test of stealth port scanning attacks using ZMap of censys engine
Seungwoon Lee, Sun-Young Im, Seunghun Shin, Byeong‐hee Roh, Cheolho Lee · 2016
Port Scanning is one of the widely used attacks to collect information of devices connected to the Internet. The information may be very useful for system administrator to assure security, but can be a bridge for malicious users not only to find vulnerabilities of the devices, but also to consider subsequent attacks. There are several search engines, such as Shodan and Censys, to build and provide searchable databases of identified devices and networks. In this paper, we implement possible stealth port scan attack tools using ZMap used in Censys search engine, and test the vulnerability of devices in an area of our university using the implemented tools. It is shown that though stealth port scanning attacks except SYN scan have been generally known as they are ineffective, many vulnerable systems are still on services and able to be scanned by the attacks.