I'm facing this question:
When could the Maimon Scan be usefull?
As I had no idea of what it was, I went into Nmap's manual and saw the explanation:
The Maimon scan is named after its discoverer, Uriel Maimon. He described the technique in Phrack Magazine issue #49 (November 1996). Nmap, which included this technique, was released two issues later. This technique is exactly the same as NULL, FIN, and Xmas scans, except that the probe is FIN/ACK. According to RFC 793 (TCP), a RST packet should be generated in response to such a probe whether the port is open or closed. However, Uriel noticed that many BSD-derived systems simply drop the packet if the port is open.
So, what I understand from this is that, many BSD-derived systems just drop the packet instead of sending an RST back so using the Maimon Scan would set that port as Open, right?
If that's correct, then, I don't get why asking such question. I mean, it would always be very usefull using it against BSD-derived systems, right?