Editing Nmap

<code>'''[[wikipedia:Nmap|Nmap]]'''</code> (''Network Mapper'') is a security [[Network scanner|scanner]] that can be used to discover [[Host (network)|hosts]] and [[Web service|services]] on a computer or [[computer network]]. Includes at least nmap and nping binaries.

== Installation ==
* <code>apt install nmap</code> or <code>snap install nmap</code>


== Basic nmap commands ==

* Basic nmap [[port]] scan (not all ports are scanned): 
**<code>nmap -Pn HOSTNAME_TO_SCAN</code>
**<code>nmap -Pn HOSTNAME_TO_SCAN -p 80,443</code>
**Scan all [[port]]s (1 – 65535)
*** <code>nmap -p- 192.168.0.1</code>
**<code>nmap HOSTNAME_TO_SCAN</code>


* Network scan:
**<code>nmap -sn 192.168.0.*</code> (-sn - [[ping]] scan so No/disable [[port scan]])
:::<code>-sn: Ping scan so disable port scan</code>


* [[OS]] detection: 
::<code>nmap -O IP</code>

*<code>nmap -A IPAddress</code> equivalent to <code>nmap -sV -sC -O -traceroute IPaddress</code>

== Basic nping commands ==
[[nping]] is packet generation, response analysis and response time measurement available since 2011 and developed by nmap developers
* "TCP ping":
** <code>nping -c 1 --tcp -p 80,433 google.com</code><ref>https://nmap.org/book/nping-man.html</ref>
** <code>nping -c 3 --tcp -p 443 --flags syn google.com</code><ref>https://www.aldeid.com/wiki/Nping</ref>
* <code>nping -H -tr 8.8.8.8</code> (-H Hide-sent do not display sent packets, -tr traceroute)

==Basic port scanning==
*Scan common ports
::<code>nmap -F 192.168.0.1</code>

*Scan all [[port]]s (1 – 65535)
::<code>nmap -p- 192.168.0.1</code>

*To scan using [[TCP connect]]
::<code>nmap –sT 192.168.0.1</code>

*To perform the default [[SYN]] scan
::<code>nmap –sS 192.168.0.1</code>

*The nmap utility can be used to detect the operating system of a particular target
::<code>nmap –A 192.168.0.1</code>

==Banner Grabbing==
* <code>-sV</code>: Probe open ports to determine service/version info

* <code>nmap -sV --version-intensity 5 xxxxxx.com -p 80</code>

The <code>-sV</code> option lets us fetch the software versions, and by adding <code>--version-intensity 5</code>, we can get the maximum number of possible details about the remote running software.

By using the powerful NSE we can also try other scripts that will help us fetch remote banners easily:

* <code>nmap -sV --script=banner IP</code>

== Activities ==
=== Basic ===
# Use [[nping]] to execute a "''tcp ping''": [[Check TCP connectivity]]

=== Advanced ===
# Read [[nmap Changelog]]: https://nmap.org/changelog.html

==See also==
* {{nmap}}
* {{Security tools}}
* [[Wikibooks:Hacking/Tools/Network/Nmap]]
* {{ping}}
* {{netcat}}
* {{tcpdump}}
* {{fail2ban}}
* [[MASSCAN]]
* {{whois}}



[[Category:Computer Networks]]
[[Category:IT Security]]