Service versions and what they tell you

A port says something is there. A version says what it is and how old. This set checks that you can ask a service to identify itself and read the answer, and that you know what the version does and does not tell you.

4 questions 1 task Read the lesson

Questions

Each one is marked as you go, and the explanation arrives straight after, which is the part worth reading.

4 questions, marked as you go.

1 What does the -sV flag add to an nmap scan?
2 In curl -sI http://127.0.0.1:8010/, what do the flags do?
3 Why can the same version string matter a great deal in one place and very little in another?
4 What should you do when nmap -sV cannot work out a version?

Tasks

These need your own device. Run the command in Termux, then paste what it printed. The marking looks at what the output means, so spacing, version numbers and ordering do not matter. If you have not installed anything yet, the lesson covers the setup.

Ask nmap for the service version

This scans port 8022 on localhost with service detection. Start the Termux SSH server first with sshd so there is something to identify. Paste the whole scan output.

Run this in Termux On your own device. Nothing on this page executes it. The command runs in your terminal, and this box only reads what you paste back.

nmap -sV -n -p 8022 localhost
Marking your own work Both halves of this are checked in your browser, with no server involved, so nothing stops you from pasting output you did not run. The tasks are written so that the easiest way to pass one is to actually do it and read the result, which is the whole intention.

All sets Read the lesson