Basic Nmap Syntax
nmap [options] <ip address or subnet>
Options
- sS // Stealth Scan
- sP // Ping Scan
- sV // Version Scan
- p // Ports
- O // Operating System
- T1-T5 // Scan Speed Settings
- A // Agressive Scan
- v // Verbose
- oA // Output All Formats
- sU // UDP Scan Ping Scan
nmap -sP <ip address>Version Scan
nmap -sV <ip address>Full TCP Port Scan
nmap -p- -sV -sS -T4 <Target>UDP Scan
nmap -sU <Target>Aggressive Scan
nmap -sS -A -T4 <Target>Operating System Scan
nmap -O <Target>All Port Scan
nmap -sS -p- -T4 <Target>Scanning specific Ports or Port Range
nmap -p<port number(s)> [options] <Target>
nmap -p <port start number - port end number> [options] <target>Examples : nmap -sS -p 22,80,443,8080 example.com, nmap -p 1-65535 example.com
Nmap Scan from a File
nmap -iL <file.txt>Nmap Scripting Engine
nmap -script=<NSE script name> <Targets>- Usefull NSE Scripts
- smb-enum*
- smb-ls
- smb-mbenum
- smb-os-discovery
- smb-s*
- smb-vuln*
- smbv2*