Ravi Sir's Cyber Security Cards › Revision Cards
Netdiscover: Finding Lab Hosts
Netdiscover: Finding Lab Hosts Netdiscover finds which computers are alive on your local network. It uses ARP (maps IP to MAC address). ARP is layer 2. Even hosts that block ping must answer ARP. So it is very reliable on a LAN. Use it only on your own lab network. This is active recon , so it needs
Read card text
What this card says
What it is
Netdiscover finds which computers are alive on your local network.
It uses ARP (maps IP to MAC address).
Why it works well
ARP is layer 2. Even hosts that block ping must answer ARP.
So it is very reliable on a LAN.
Key rule
Use it only on your own lab network.
This is active recon, so it needs permission.
| Mode | What it does | Detectable? |
|---|---|---|
| Active (-r) | Sends ARP "who has" for every IP in the range | Yes – ARP bursts are visible to ARP-watch tools |
| Passive (-p) | Listens for ARP from other machines | Almost no traffic sent |
Learn more in the lesson: 19.5 Netdiscover: Finding Lab Hosts