nmap scans : some basics over LAN

nmap : nmap(network mapper) is a network scanning tool written by Gordon Lyon and used to scan port, IP, operating systems,services on computer network

Here, I List some useful set of nmap scans over LAN :

1)ping a range of IP addresses
nmap -sP 192.168.1.100-254

-sP: Ping Scan

2)list all opened ports on host
nmap -p 1-65535 --open IP

-p : port range
--open: Only show open
Where IP may be a single IP, a hostname or a subnet

3)Get info about remote host ports and OS detection
nmap -sS -P0 -sV -O IP

Where IP may be a single IP, a hostname or a subnet
-sS TCP SYN scanning (also known as half-open, or stealth scanning)
-P0 option allows you to switch off ICMP pings.
-sV option enables version detection
-O flag attempt to identify the remote operating system
Other option:
-A option enables both OS fingerprinting and version detection
-v use -v twice for more verbosity.

Useful Links:

* Installation Guide
* Document of Nmap
* Books on Nmap


:-fat0ss