Link to install Metasploitable2 vulnerable server in VirtualBox (not required for the class): docs.rapid7.com/metasploit/metasploitable-2/ Article: Understanding TCP Flags: SYN ACK RST FIN URG PSH: www.howtouselinux.com/post/tcp-flags Common Nmap TCP Scans: TCP Connect Scan -sT nmap.org/book/scan-methods-connect-scan.html TCP SYN Scan -sS nmap.org/book/synscan.html Never scan anything without explicit permission! It can get you a police record.