# Task 8 - NULL, FIN and Xmas ## Task 8 Scan Types NULL, FIN and Xmas ### Which of the three shown scan types uses the URG flag? > It's referred to as an xmas scan as the flags that it sets (PSH, URG and FIN)

Reveal Flag 🚩

:triangular\_flag\_on\_post:`xmas`

### Why are NULL, FIN and Xmas scans generally used? > That said, the goal here is, of course, firewall evasion. Many firewalls are configured to drop incoming TCP packets to blocked ports which have the SYN flag set (thus blocking new connection initiation requests). By sending requests which do not contain the SYN flag, we effectively bypass this kind of firewall.

Reveal Flag 🚩

:triangular\_flag\_on\_post:`Firewall Evasion`

### Which common OS may respond to a NULL, FIN or Xmas scan with a RST for every port? > In particular Microsoft Windows (and a lot of Cisco network devices) are known to respond with a RST to any malformed TCP packet -- regardless of whether the port is actually open or not.

Reveal Flag 🚩

:triangular\_flag\_on\_post:`Microsoft Windows`

--- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://thmflags.gitbook.io/thm-walkthroughs/difficulty-easy/nmap/task-8-null-fin-and-xmas.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.