Nmap

Nmap is one of the most popular and robust port scanners available. We will show how we can leverage Nmap and the Nmap Scripting Engine (NSE).

TCP Port Scan

Basic Scans

sudo nmap -sC -sV -oA nmap/basic 10.10.10.100
sudo nmap -p 139,445 --script vuln -oA nmap/vulnScan 10.10.10.100
sudo nmap -p 445 -sV --script vulscan --script-args vulscandb=exploitdb.csv 10.10.10.100

Script Scan

sudo nmap --script <script-name> -oA nmap/script-name 10.10.10.100
sudo nmap --script-help <script-name>

OS Detection Scan

sudo nmap -O -oA nmap/osDetection 10.10.10.100 --osscan-guess

No Ping Scan

sudo nmap -Pn -oA nmap/noPing 10.10.10.100

All Ports Scan

sudo nmap -p - -oA nmap/allPorts 10.10.10.100

Complete TCP Scan

sudo nmap -Pn -sT -A -oA nmap/completeYCP 10.10.10.100

UDP Port Scan

Top 25 Ports Scan

sudo nmap -sU --top-ports=25 -oA nmap/udpScan 10.10.10.100

Last updated