Categories: safe, discovery
Classifies a host's IP ID sequence (test for susceptibility to idle scan).
Sends six probes to obtain IP IDs from the target and classifies them
similarly to Nmap's method. This is useful for finding suitable zombies
for Nmap's idle scan (
-sI) as Nmap itself doesn't provide a way to scan
for these hosts.
Set destination port to probe
nmap --script ipidseq [--script-args probeport=port] target
Host script results: |_ipidseq: Incremental! [used port 80]
License: Same as Nmap--See https://nmap.org/book/man-legal.html