nmap
- By default, Nmap scans 1000 ports.
- You can scan multiple sites in one scan.
- You can also scan both the site and the particular IP.
- You can scan multiple sites in one scan.
- You can easily get the IP and address of the site.
- Then check the location using this tool.
- You can also check it by typing whois 45.33.32.156 in the browser.
- Nmap provides a test site: http://scanme.nmap.org.
- Remember to use
-oGto save the file in a grepable format.
- Remember to use
TCP Scan
Example:
For MySQL:
Fast Scan
- nmap -F: Gives the list of the most targetable ports.
- By default, it scans only 100 ports.
- nmap –open: Searches only for the open ports.
Aggressive Scan
- nmap -A: Looks for the operating system and other services.
- nmap -sV: Gives you the version of the operating system. Useful to target Exploits_metasploit for this system version.
Nmap for Speed
- nmap -T (1-5): Sets the speed of the command.
- nmap -Pn: Skips the pinging.