Operatin Sheet 1.1 - NMAP Netwirk Mapper /IP Scanner: Developed by Gordon Lyon Features
Nmap is a network scanning tool that can identify open ports, perform OS detection, and enable scriptable interaction with targets. It works by pinging ports with packets and analyzing responses to determine which ports are open, filtered, or closed. While useful for security auditing, Nmap could enable hacking if used without permission and raises ethical issues around unauthorized scanning.
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0 ratings0% found this document useful (0 votes)
86 views13 pages
Operatin Sheet 1.1 - NMAP Netwirk Mapper /IP Scanner: Developed by Gordon Lyon Features
Nmap is a network scanning tool that can identify open ports, perform OS detection, and enable scriptable interaction with targets. It works by pinging ports with packets and analyzing responses to determine which ports are open, filtered, or closed. While useful for security auditing, Nmap could enable hacking if used without permission and raises ethical issues around unauthorized scanning.
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 13
secret.pathetic.
net
Operatin Sheet 1.1 – NMAP
Netwirk Mapper /IP Scanner • Developed by Gordon Lyon • Features – Host discovery – Port scanning – Version detecting – OS detection – Scriptable interaction with the target Uses if NMAP • Identfying open ports • Network Mapping • Auditng sec阸urity Tiil Envirinment • Runs on Linux, Windows, Mac阸 OS X and other smaller operatng systems • GUI optons: – Zenmap – XNMap – NmapFE Hiw It Wirks • DNS lookup- matc阸hes name with IP • NMap pings the remote target with 0 byte pac阸kets to eac阸h port – If pac阸kets are not rec阸eived bac阸k, port is open – If pac阸kets are rec阸eived, port is c阸losed • Sends diferent pac阸kets with diferent tming to determine fltered/unfltered, version, etc阸. • Firewalls c阸an interfere with this proc阸ess Output frim NMAP • Displays open ports • Diferent output based upon c阸onstraints on run, but c阸an show – Version type – Filtered/unfltered Basic NMAP scans • When run through c阸ommand prompt or terminal, entry felds are: – Program – Constraints on run – Target
• Ex. > nmap –sS sc阸anme.nmap.org
• Ex. > nmap -Db fp.pathetc阸.net sec阸ret.pathetc阸.net User Experience • Easy to install • Fairly easy to use, frewall problems and network setng issues • User guide available, many tutorials • Sc阸an tme- c阸an range from a few sec阸onds to several hours • Can sc阸an over a range of IP addresses and utlizee stealthy sc阸anning Ethical Issues • Can be used for hac阸king- to disc阸over vulnerable ports • System admins c阸an use it to c阸hec阸k that systems meet sec阸urity standards • Unauthorizeed use of Nmap on a system c阸ould be illegal. Make sure you have permission before using this tool Basic Scanning Open up a terminal, if you haven't already, and run the following linux c阸ommand.
# nmap -sn 192.168.1.0/24
If your home network doesn't use the
192.168.1.X IP struc阸ture, substtute in yours. The sequenc阸e ends with 0/24 to tell Nmap to sc阸an the entre subnet. Basic Scanning You c阸an use Nmap to sc阸an multple targets at onc阸e. Doing so c阸an easily be done in-line when you run Nmap.
# nmap -sS -T4 192.168.1.4 192.168.1.35
192.168.1.102 Open Pirt Scanning --open If you are only looking for whic阸h ports are open on a spec阸ifc阸 mac阸hine, you c阸an tell Nmap to only look for open ports with the --open fag.
# nmap -sS -T4 --open 192.168.1.105
Operatin System Versiin Sometmes, it's useful to know what sofware and what versions of that sofware a mac阸hine is running. This is espec阸ially good for investgatng your own servers.
# nmap -sS -sV -T4 192.168.1.105
Pirt Selectin Oc阸c阸asionally, you may only want to sc阸an selec阸t ports with Nmap. The -p fag allows you to spec阸ify spec阸ifc阸 ports for Nmap to sc阸an. Nmap will then only sc阸an those spec阸ifed ports on the target mac阸hine.