Skip to content

Latest commit

 

History

History
89 lines (54 loc) · 3.38 KB

page-4.md

File metadata and controls

89 lines (54 loc) · 3.38 KB
title description
Nmap - Network Mapper
Learn what Nmap is, how to install it, its legal aspects, and practical usage.

Demystifying Nmap 🔍

Welcome to the world of Nmap! In this guide, we'll explore what Nmap is, its legality, how it works, and essential usage examples.

What is Nmap?

Nmap, short for Network Mapper, is a powerful open-source tool designed for network exploration and security auditing. It allows you to discover security vulnerabilities within your systems, making it a valuable asset in network defense.

Is Nmap Legal?

The legality of using Nmap depends on how it's employed. When utilized appropriately, Nmap is a proactive tool for securing your network. It assists you in promptly identifying security weaknesses in your systems. However, the legality of scanning external servers varies by jurisdiction. Misuse of Nmap may result in consequences, including being banned by your Internet Service Provider (ISP). Always research and understand the legal implications before employing Nmap for extensive scanning.

How Does Nmap Work?

Nmap builds upon previous network auditing tools, providing rapid and comprehensive network traffic analysis. It operates by detecting active hosts and IPs on a network and scrutinizes the data packets to provide insights about each host and its running operating systems.

Prerequisite Knowledge 📚

Before diving into Nmap, it's helpful to grasp the following concepts:

  • Localhost: Understanding what localhost is.
  • IP Addresses: Familiarity with IP addresses and their significance.

Installing Nmap in Linux Terminal

You only need to follow these installation steps if your operating system doesn't come with Nmap pre-installed. If you're using ParrotOS or Kali-Linux, Nmap is typically pre-installed.

For systems using the APT package manager (common in VirtualBox-hosted operating systems):

apt install nmap -y

If your operating system doesn't use the APT package manager, you should be able to install Nmap according to your package manager's guidelines.

Nmap Syntax

Nmap commands are constructed with specific syntax to customize scans. Here are some common examples:

  • Basic Scan: nmap -v -A scanme.nmap.org
  • Network Scan: nmap -v -sn 192.168.0.0/16 10.0.0.0/8
  • Random Host Scan: nmap -v -iR 10000 -Pn -p 80

To explore further syntax options and CLI parameters, consult the Nmap manual by using:

man nmap

Nmap's Own Test Server

Nmap offers the scanme.nmap.org server for testing your scans. Be mindful not to overuse this resource and stress the server. Prior to scanning, review the server's scanning rules, and never scan random servers without proper authorization.

Nmap Usage Examples

Let's dive into practical examples of using Nmap:

Example 1: A typical Nmap scan with OS and version identification:

nmap -A -T4 scanme.nmap.org

Example 2: Scanning all TCP and UDP ports:

sudo nmap -n -PN -sT -sU -p- scanme.nmap.org

Example 3: Conducting an Operating System scan:

OS scanning is a powerful feature of Nmap that identifies the host's OS and version. Use the following command:

nmap -O 'target IP'

Example 4: Disabling Domain Name Resolution (DNS):

Speed up your Nmap scans by disabling reverse DNS resolution with the -n parameter. For example, for a basic ping scan on a large network:

nmap -sp -n 192.100.1.1/24