arp-scan
Discovers hosts on the local network via ARP (sees boxes that ignore ping).
Discovers hosts on the local network by sending ARP requests. Working at layer 2 it sees boxes that ignore ping (ICMP firewall), so it often finds more than a ping sweep on the same LAN.
Family Network & port scanning
Flags --localnet -I <iface>
Cheatsheet Discovery & scanning
Installation
sudo apt install -y arp-scanUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- BlackMarket 1VulnHub
- Cereal 1VulnHub
- Darkhole 2VulnHub
- DC-1VulnHub
- Hacker Kid 1.0.1VulnHub
- Infovore 1VulnHub
- MyExpense 1VulnHub
- SickOs 1.2VulnHub
- Symfonos 1 & 2VulnHub
- Symfonos 3VulnHub
- Symfonos 5VulnHub
- Symfonos 6VulnHub