3. OS Discovery

1. Identify OS with TTL in wireshark

Follow TCP stream in wireshark. Check the ICMP reply after pinging. If TTL is around 128, its Windows, if around 64, its Linux

2. Perform OS Discovery using Nmap

sudo nmap -O [Target IP Address]
sudo nmap -A [Target IP Address]

3. Nmap NSE Script for OS Discovery

sudo nmap --script smb-os-discovery.nse [Target IP Address]

4. Unicornscan

unicornscan | Kali Linux ToolsKali Linux

unicornscan 192.168.18.100 - Iv
# -I is for immediate scan and v  is for verbose scan