Initial Scanning – Probing the Target’s defences¶

With reconnaissance complete, the falcon tests the wind before the strike. Initial scanning involves live host discovery, port enumeration, and service detection—each probe revealing vulnerabilities while avoiding detection. Precision here separates a successful engagement from a failed incursion.

How?¶

• War-dialing-driving-flying-shipping

• Live host discovery

• Host discovery with ICMP (ping sweep)

• Host discovery with TCP

• Host discovery with UDP

• Port scanning

• Service and OS detection

• Diving deeper in discovery

• Defence detection

• Stealth scans

• Firewall evasion