Nmap

​Nmap: network discovering and security auditing

By Magdalena Harasiewicz

Nmap (short for Network Mapper) is a powerful open-source tool used for:

• Port scanning: See which ports are open on a target machine.

• Service detection: Identify what services (e.g., HTTP, SSH) are running and their versions.

• OS fingerprinting: Guess the operating system of a remote host.

• Network inventory: Map out devices on a network.

• Vulnerability scanning: With scripts (via Nmap Scripting Engine, NSE), it can detect known vulnerabilities.

​Nmap basic commands:

• -sT TCP Connect: Full connection; easy to detect; no root needed

• -sS SYN (Stealth): Half-open scan; fast and stealthy; needs root.

• -sU UDP Scan: Scans UDP ports; slower and less reliable.

• -sV Version Detection: Identifies service versions.

• -O OS Detection: Guesses operating system via fingerprinting.

• -sn Ping Scan: Checks which hosts are online; no port scan.

• -A Aggressive Scan: Combines OS, version, script, and traceroute.

• --script NSE: Runs custom scripts for advanced scanning.

Multiple Select

Nmap is an open-source tool that:

• Is legal but you can't use it on external networks without permission

• Discovers hosts and services on a computer network.

• Is an illegal tool, only used by hackers

• can't be used to detect vulnerabilities

Multiple Select

What does the following command perform?
nmap -sT -P0 -n <IPaddress> -p-

• Performs a TCP Connect scan, establishing a full TCP connection to each port

• it will only show open ports

• enable DNS resolution

• Scans all 65,535 TCP ports (from 1 to 65535)