Port Scanning - FIN Scan

[Resheph]

In this type of scan, the attacker sends frames to the target with the FIN flag set. The result is somewhat similar to what happens in an Xmas tree scan. The victims's response depends on wether the port is open or closed. Much like the Xmas tree scanm if a message with the FIN flag set is sent to an open port there is no response, but if the port is closed the target host returns a RST.