Banner grabbing reads service banners to identify software versions — helping attackers find vulnerable software. Tools: Nmap, Netcat, Telnet.
Banner grabbing is passive reconnaissance. Defense: suppress or falsify banners. Knowing a server runs Apache 2.2.3 lets an attacker target known CVEs for that exact version.