I know how to do a zombie scan but my question is how do you find a zombie host?


1 Answer 1


You can read the documentation of nmap here, who have a section "Finding a Working Idle Scan Zombie Host".

It explain that you must find a host with IPID sequences of either Incremental or Broken little-endian incremental.

You can use a command like sudo nmap -sA -O -v <IP> and find which host has a Incremental or Broken little-endian incremental IPID.

Not the answer you're looking for? Browse other questions tagged .