Unicornscan

SYN Scan

unicornscan -msf -v 192.168.1.1/24

UDP Scan

unicornscan -mU -v 192.168.1.1/24

Port Scan

unicornscan 192.168.1.1:80,443

Custom Source IP Scan

unicornscan -s 192.168.1.100 192.168.1.1:80

PCAP Saving

unicornscan -w scan_results.pcap -r 1000 -mT 192.168.1.1

OS Detection

Unicornscan is a network reconnaissance tool that can identify a target machine’s operating system by analyzing the Time to Live (TTL) values in the acquired scan results

Unicornscan is a tool used by attackers and ethical hackers primarily for OS Discovery or OS fingerprinting on a remote target system.

Key details regarding Unicornscan and its functionality, based on the sources, include:

Primary Function and Mechanism

OS Discovery: Unicornscan is an effective tool for performing OS discovery activities on a target machine.
Mechanism (TTL Analysis): The operating system of the target machine is identified by observing the TTL (Time to Live) values acquired in the scan result.
Windows Identification Example: If the TTL value acquired after the scan is 128, the OS is possibly Microsoft Windows.

Usage and Syntax

Syntax: The basic command used to perform a Unicornscan is: #unicornscan <target IP address>.
Example Output: When scanning a target IP (e.g., 10.10.1.22), the tool may list ports as open along with the associated TTL value, such as TCP open 10.10.1.22:3389 ttl 128.
Default Behavior: An example command provided shows Unicornscan scanning many ports in mode TCPscan (e.g., ports 7, 9, 11, 13, 18, 19, 21-23, etc.) when the -lv option is used.
Confirmed OS: Based on the results showing a TTL of 128, the determined OS is Windows.