User Tools

Site Tools


nmap

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
nmap [2019/09/15 18:56]
acm
nmap [2019/09/23 15:17] (current)
acm
Line 1: Line 1:
 ==== NMap Network Mapper ==== ==== NMap Network Mapper ====
-Nmap is an opensource networking mapping tool frequently used in order to gain an accurate picture of how a network is setup. It was written by Gordon Lyon and comes preinstalled on many Linux distros including Kali. +Nmap is an opensource networking mapping tool frequently used in order to gain an accurate picture of how a network is setup. It was written by Gordon Lyon and comes preinstalled on many Linux distros including Kali. 
  
 === Port Scanning === === Port Scanning ===
 The baseline functionality provided by Nmap is port scanning. This allows us to be able to tell what ports are open on our target machine. Nmap can conduct a basic port scan using The baseline functionality provided by Nmap is port scanning. This allows us to be able to tell what ports are open on our target machine. Nmap can conduct a basic port scan using
 <code> <code>
-$nmap 192.168.1.1+$nmap 192.168.56.3
 </code> </code>
-This command conducts an SYN scan of the 1000 most commonly used ports on the machine at 192.168.1.1. While this is useful often times you'll want to scan all the ports on the target machine, which can be done using(results of scan are shown here)+This command conducts an SYN scan of the 1000 most commonly used ports on the machine at 192.168.1.1. While this is useful often times you'll want to scan all the ports on the target machine, which can be done using(results of the scan are shown here)
 <code> <code>
 $nmap -p- 192.168.56.3 $nmap -p- 192.168.56.3
Line 48: Line 48:
 The '-p-' switch tells Nmap that you want to scan all the ports on the target machine. Both of these examples are SYN scans, which is one of the most popular types of scans that Nmap is capable of due to its speed and its lowered chance of crashing the target machine. That being said there are a variety of different scan types and it is important to be familar with all of them. You can change the scan type using the '-s<X>' switch, where <X> is replaced by the letter denoting the type of scan you wish to conduct.For example: The '-p-' switch tells Nmap that you want to scan all the ports on the target machine. Both of these examples are SYN scans, which is one of the most popular types of scans that Nmap is capable of due to its speed and its lowered chance of crashing the target machine. That being said there are a variety of different scan types and it is important to be familar with all of them. You can change the scan type using the '-s<X>' switch, where <X> is replaced by the letter denoting the type of scan you wish to conduct.For example:
 <code> <code>
-$nmap -sU 192.168.1.1+$nmap -sU 192.168.56.3
 </code> </code>
 conducts a UDP scan. Nmap can also conduct a version scan that allows us to identify what services are running on a specified port. This can be done using the '-sV' switch. conducts a UDP scan. Nmap can also conduct a version scan that allows us to identify what services are running on a specified port. This can be done using the '-sV' switch.
Line 92: Line 92:
 </code> </code>
  
-=== Scripting Engine and Vulnerablity Scanning ===  +=== Scripting Engine and Vulnerability Scanning ===  
 +One of the most powerful and important to learn parts of Nmap is its built-in scripting engine sometimes called NSE. NSE allows users to write scripts in Lua to help automate a wide variety of tasks. There are a number of built-in scripts that come with Nmap that allow it to implement some of its more advanced functionality, such as vulnerability scanning.You can run a vulnerability scanning script using 
 +<code> 
 +nmap --script vuln 192.168.56.3 
 +</code>
  
 === References === === References ===
-  *https://nmap.org/+  *Nmap Official Site 
 +    *https://nmap.org/ 
 +  *The Basics of Hacking and Penetration Test by Patrick Engebreston 
 +    *https://www.amazon.com/Basics-Hacking-Penetration-Testing-Ethical/dp/0124116442/ref=sr_1_3?crid=5FJYSYVHJUYY&keywords=the+basics+of+hacking+and+penetration+testing&qid=1568592228&sprefix=the+basics+of+hackin%2Caps%2C184&sr=8-3 
 +  *Nmap Official Book 
 +    *https://www.amazon.com/Nmap-Network-Scanning-Official-Discovery/dp/0979958717/ref=sr_1_2?keywords=nmap&qid=1568592149&sr=8-2
  
nmap.1568591801.txt.gz · Last modified: 2019/09/15 18:56 by acm