0% found this document useful (0 votes)
86 views13 pages

Operatin Sheet 1.1 - NMAP Netwirk Mapper /IP Scanner: Developed by Gordon Lyon Features

Nmap is a network scanning tool that can identify open ports, perform OS detection, and enable scriptable interaction with targets. It works by pinging ports with packets and analyzing responses to determine which ports are open, filtered, or closed. While useful for security auditing, Nmap could enable hacking if used without permission and raises ethical issues around unauthorized scanning.

Uploaded by

ኣስፋ ሙሉ
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
86 views13 pages

Operatin Sheet 1.1 - NMAP Netwirk Mapper /IP Scanner: Developed by Gordon Lyon Features

Nmap is a network scanning tool that can identify open ports, perform OS detection, and enable scriptable interaction with targets. It works by pinging ports with packets and analyzing responses to determine which ports are open, filtered, or closed. While useful for security auditing, Nmap could enable hacking if used without permission and raises ethical issues around unauthorized scanning.

Uploaded by

ኣስፋ ሙሉ
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 13

secret.pathetic.

net

Operatin Sheet 1.1 – NMAP


Netwirk Mapper /IP Scanner
• Developed by Gordon Lyon
• Features
– Host discovery
– Port scanning
– Version detecting
– OS detection
– Scriptable interaction with the target
Uses if NMAP
• Identfying open ports
• Network Mapping
• Auditng sec阸urity
Tiil Envirinment
• Runs on Linux, Windows, Mac阸 OS X and other
smaller operatng systems
• GUI optons:
– Zenmap
– XNMap
– NmapFE
Hiw It Wirks
• DNS lookup- matc阸hes name with IP
• NMap pings the remote target with 0 byte
pac阸kets to eac阸h port
– If pac阸kets are not rec阸eived bac阸k, port is open
– If pac阸kets are rec阸eived, port is c阸losed
• Sends diferent pac阸kets with diferent tming
to determine fltered/unfltered, version, etc阸.
• Firewalls c阸an interfere with this proc阸ess
Output frim NMAP
• Displays open ports
• Diferent output based upon c阸onstraints on
run, but c阸an show
– Version type
– Filtered/unfltered
Basic NMAP scans
• When run through c阸ommand prompt or
terminal, entry felds are:
– Program
– Constraints on run
– Target

• Ex. > nmap –sS sc阸anme.nmap.org


• Ex. > nmap -Db fp.pathetc阸.net
sec阸ret.pathetc阸.net
User Experience
• Easy to install
• Fairly easy to use, frewall problems and
network setng issues
• User guide available, many tutorials
• Sc阸an tme- c阸an range from a few sec阸onds to
several hours
• Can sc阸an over a range of IP addresses and
utlizee stealthy sc阸anning
Ethical Issues
• Can be used for hac阸king- to disc阸over
vulnerable ports
• System admins c阸an use it to c阸hec阸k that
systems meet sec阸urity standards
• Unauthorizeed use of Nmap on a system c阸ould
be illegal. Make sure you have permission
before using this tool
Basic Scanning
Open up a terminal, if you haven't already, and
run the following linux c阸ommand.

# nmap -sn 192.168.1.0/24

If your home network doesn't use the


192.168.1.X IP struc阸ture, substtute in yours. The
sequenc阸e ends with 0/24 to tell Nmap to sc阸an
the entre subnet.
Basic Scanning
You c阸an use Nmap to sc阸an multple targets at
onc阸e. Doing so c阸an easily be done in-line when
you run Nmap.

# nmap -sS -T4 192.168.1.4 192.168.1.35


192.168.1.102
Open Pirt Scanning
--open
If you are only looking for whic阸h ports are open
on a spec阸ifc阸 mac阸hine, you c阸an tell Nmap to only
look for open ports with the --open fag.

# nmap -sS -T4 --open 192.168.1.105


Operatin System Versiin
Sometmes, it's useful to know what sofware
and what versions of that sofware a mac阸hine is
running. This is espec阸ially good for investgatng
your own servers.

# nmap -sS -sV -T4 192.168.1.105


Pirt Selectin
Oc阸c阸asionally, you may only want to sc阸an selec阸t
ports with Nmap. The -p fag allows you to
spec阸ify spec阸ifc阸 ports for Nmap to sc阸an. Nmap
will then only sc阸an those spec阸ifed ports on the
target mac阸hine.

# nmap -sS -T4 -p 25,80,443 192.168.1.105

You might also like