Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

learn more… | top users | synonyms

0
votes
0answers
13 views

Nmap scanning Virtualbox Windows VM through static IP

I have a Windows 7 VM set up on a Ubuntu host with a static IP assigned to the VM (192.168.56.2) but when I tried scanning this IP with nmap I got strange results root@Host-PC:~# nmap 192.168.56.2 ...
0
votes
1answer
20 views

Nmap OS database missing fingerprints

I have discovered that the Nmap OS database has some fingerprints missing for OS versions. For example, Apple iOS versions 7.1.2 and 9.3.2 are missing. Basically my question is to do with the reason ...
0
votes
1answer
10 views

How to find the port that a service of interest is listening on remotely?

There's a remote server on my network that's compromised, with no physical access. The hacker reassigned sshd service to listen on a another port. Is there a way to use nmap to find a port ...
0
votes
2answers
33 views

Using nmap to traceroute on a specific port

The short version of this is that from client A to server B, some connections are getting all the way there, and others are being dropped in transit. I know they're being dropped in transit because, ...
0
votes
0answers
30 views

Why doesn't nmap show SIP ports open for this router?

SIP calls on from demo_bob to demo_alice on Asterisk had no sound, so I opened ports on the NetGear WNR1000v2 - N150 Wireless Router: # Service Type Port IP 1 IP_Phone 6670-6670 192....
0
votes
1answer
33 views

Nmap scan on my LAN is blocked by my host firewall (Linux)

I recently added some rules to GUFW to make sure only my (personal) VPN connection is allowed to get out, x.x.x.x being my ip, y.y.y.y being my VPN's IP I connect to. To - Action - From y.y.y.y ...
1
vote
1answer
32 views

What are the default nmap options?

Which options are used by default, when the user fires # nmap target without any explicit option? I am going to write the defaults of the three options I consider the most important. It would be ...
0
votes
2answers
206 views

What is the difference between nmap and netstat?

I am trying to learn a little about networking and I was hoping to get some help. Does anyone know the difference between nmap and netstat? I kind of know how to use them and how to check ports but ...
0
votes
0answers
88 views

nmap on metasploitable outputs all ports filtered

I wanted to get started with metaploit on kali. I have set up Kali Linux in VirtualBox and everything works fine. Then I set up Metasploitable 2 on vmwareplayer. Now when I nmap metasploitable it ...
1
vote
2answers
38 views

With nmap is it possible to scan a private network from outside?

Is it possible for a hacker to scan my computer using this command: nmap 10.0.0.0/8 even if he is not connected to my network ? (and if my private IP is 10.0.2.24 for instance) Thanks
-2
votes
2answers
2k views

What is another use for port 8080/8443 other than a proxy?

I see alot of servers with port 8080 open. Most times I am able to connect to the proxy server, but the majority are unable to make requests outside the network, or internally. What is the purpose of ...
0
votes
0answers
18 views

Identifying device type remotely [duplicate]

I am writing an IP scanner in C#... I'm not looking for coding help, but rather the how do I determine the device type. Using WMI and remote registry I am able to get all information I want from ...
0
votes
1answer
55 views

Close a TCP connection using nmap

I am trying to close connections in command line. For instance, I am trying to close my SSH connection with this Nmap command: $ sudo nmap -p 22 --scanflags RST <mySSHServerPublicIP> $ sudo ...
0
votes
2answers
40 views

random open ports on nmap scan

My machine has the IP address 192.168.1.50 . When i do the following nmap scan nmap -p- -sT -Pn 192.168.1.50 from the same machine, i get at each scan some random open ports. And these random open ...
0
votes
1answer
27 views

NMap save results to separate files

I was wondering if there was any way to specify a range of IP addresses and save the scan results for each to a sepperate file in the same folder. So scan 1.1.1.1, 1.1.1.2, 1.1.1.3 and they all save ...
0
votes
1answer
61 views

how to discover up hosts in a local network with nmap

I know that this question was asked a lot, but all the answers given are with the ping scan of nmap nmap -sP 192.168.1.1/24. The problem with this scan is that it doesn't detect hosts that doesn't ...
0
votes
1answer
48 views

Port forwarding error

I am very new to networks, and I am trying to access a computer which has no public ip from outside its private network. The layout of the network looks like this: PC <----> ...
0
votes
0answers
2 views

Can I tell zenmap to apply a command to all known hosts?

In zenmap (an nmap gui), you can apply various scans, and it remembers the results, keeping a list of hosts you have successfully scanned. Can you tell it to apply a command against all known hosts (...
1
vote
1answer
316 views

NMAP Always says host is down (when using -Pn it says ports filtered)

I am running Kali 2.0 (Kali sana) and I have problem with NMAP, it everytime says that host is down when i scan it (even myself with firewall off)... When I try online nmap (https://pentest-tools.com/...
0
votes
0answers
17 views

Can't get nmap info from Brainpan2

I'm trying to setup an environment in VirtualBox for exploiting Brainpan2 (from Vulnhub). I created 2 VMs (Brainpan2 and Kali) but when I try to perform an nmap -A scan on the other 3 IP addresses on ...
0
votes
1answer
2k views

Nmap won't run any scripts

When I try to run a Nmap script on Kali Linux I get the following: root@known:~# nmap --script smb-check-vulns.nse 192.168.1.111 Starting Nmap 7.00 ( https://nmap.org ) at 2015-12-04 03:45 EST NSE: ...
1
vote
0answers
43 views

Why would “nmap -p -” miss an open port?

I ran nmap -p - against a system that I knew to have at least one listening service. The only output that was returned was for port 113 (ident), which showed "closed". I ran nmap again, but this time ...
1
vote
1answer
371 views

How we can open the filtered port again?

I had a root access from a Server over SSH on 2200 port but, recently I can not connect to it ,so after checking via nmap turns out the port is filtered by admin or someone . Host is up (0.011s ...
1
vote
2answers
165 views

Is a firewall blocking me from accessing VZW's website?

I am not able to get on Verizon Wireless's website http://www.verizonwireless.com/ from any computer on my LAN. Chrome and Firefox just return with a connection timed out. However, the name resolves ...
0
votes
1answer
253 views

Scanning a network and SSH each IP until I get in through SSH

Normally, I would SSH into that machine using: ssh user1@123.45.67.8 That server in my network is forced to use DHCP in the subnet (134.96.90.0). And everytime it shuts down, I have to go find the ...
0
votes
1answer
430 views

Installing nmap and keeping it undetectable

I have a administrative computer fully equipped with antivirus (avg,norton,malbytes. etc) that I want to install ncat(nmap) on and keep it as close to undetectable as possible. How would I do this?
0
votes
1answer
112 views

nmap -sn and -sL produce different results for the same host

When I scan the whole network it shows 3 hosts are up: pi@Pi /Z $ nmap -sn 192.168.0.0/24 Starting Nmap 6.00 ( http://nmap.org ) at 2015-09-09 00:48 EDT Nmap scan report for 192.168.0.100 Host is up ...
0
votes
2answers
56 views

How to SSH to and connect back to original network?

Once I’ve connected to my Linux Machine(B) over the internet from my current PC(A), is there a way to run software on that machine(B) on the local one(A) so that it uses the original network. For ...
1
vote
1answer
70 views

With nmap and awk, displaying any http ports with the host's ip

I scanned around 50 hosts on a network with this command: nmap -sV -iL sweep_ips.txt -oG result.txt ex: ... Host: 192.168.x.x () Ports: 8000/open/tcp//http//Apache httpd 2.2.3 ((CentOS))/ ...
1
vote
2answers
3k views

Scanning my public IP address with Nmap finds TCP port 1720 open, is this a security concern?

When scanning my public ip address with Nmap I found out that I have open port on 1720/TCP. According Nmap service on it is H.323/Q.931. Researching uses of this port also brings up Microsoft ...
2
votes
0answers
66 views

Scan using nmap on a different network

My system is connected to a router and that router is the part of LAN. How do I scan other systems that are a part of the LAN to which my router is connected ? My Router's DHCP allocates C-class ...
0
votes
0answers
21 views

Edit nmap database for os detection

I try to discover a network topology by using nmap. Part of the job is detect device type. I want to add my device information into the nmap database (which is not available before). Of course, I ...
1
vote
1answer
116 views

Detect RIPv1 via NMAP

Due to the recent increase of reflection attacks noted by Akamais security teams using original RIP(classful, depreciated) I'm interested to see if some of the CPE running within a network segment ...
0
votes
1answer
142 views

nmap: Scantype - not supported

When I run the following nmap command to test against my VM's: nmap --spoof-mac Cisco --data-length 24 -T paranoid -max-hostgroup 1 -max-parallelism 10 -PN -f -D 10.1.20.5,RND:5,ME -v -n -sS -sV-oA /...
1
vote
1answer
117 views

Why Armitage nmap results differs from msfconsole ones?

More specific in msf console why when I 'nmap -v -A 192.168.1.8' I get all the results I expect (OS detection windows 8.1 etc), while when I do the same from armitage I get unknown? I have the same ...
0
votes
1answer
90 views

how to scan non-default SSH port

for example port SSH is 4020 nmap 192.168.1.1 -sV The result is : PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd where is SSH port ? I try command below to test ssh ssh ...
0
votes
1answer
55 views

Ping sweep LAN without specifying IP

I know I can ping sweep my LAN by doing something like nmap -sP 192.168.0.0/24 which works just fine. I was wondering if there was anyway nmap could figure out the range for the local subnet on it's ...
1
vote
3answers
472 views

different behavior: “sudo nmap” vs just “nmap”?

I'm attempting to do a simple port scan with nmap: $ nmap 192.168.56.101 Starting Nmap 6.47 ( http://nmap.org ) at 2015-03-10 19:30 IST Nmap scan report for 192.168.56.101 Host is up (0.0048s ...
1
vote
1answer
158 views

Bash - Parsing XML output of nmap

I am trying to write a bash script that will take port id I retrieve from an nmap command, and then use those ports to send a file using netcat. So I got some basic knowledge using this link, How can ...
0
votes
1answer
140 views

Why does a NMAP scan give different results depending on whether it's run from inside or outside a LAN?

I am testing/setting up a Thomson TG585v7 Router/Firewall. Results when running nmap from a computer inside the LAN: $ sudo nmap -O 210.86.xxx.xxx Starting Nmap 6.40 ( http://nmap.org ) at 2015-02-...
1
vote
0answers
93 views

If nmap reports a port is open, does that ALSO mean a service is listening on the port?

I have a Thompson TG585v7 router/firewall whose firewall is configured to FORWARD several ports to a computer X54 within the LAN. These ports are in the range 1024 through to 2500 That X54 ...
0
votes
2answers
2k views

How to reverse arp using nping for Windows

I would like to send a reverse ARP to resolve an IP address given a MAC address using nping for Windows. The documentation is not clear on how this should work and I'm unable to find any examples ...
0
votes
1answer
946 views

Detect if iPhone is active on network

I want to detect if my iPhone connects / is connected to my LAN, so I can turn on the lights. This is pretty close to this question How to detect an iPhone connecting a network? I want to detect if ...
0
votes
1answer
868 views

Troubleshoot a hung nmap scan?

I am attempting to scan a host with nmap and it appears the program is hung. The scan is 1 host, all IPv4 TCP and UDP ports. The host is running in a virtual machine, and the target is a live host on ...
0
votes
1answer
44 views

How to detect ips using nmap?

I am currently working on demonstrating Man in middle Attack foe which I am using my phone as a Victim and my PC running ubuntu 14.04LTS as attacker. I am using nmap to ping my phone to check if its ...
5
votes
2answers
9k views

What is the recommended way to get nmap on OSX?

Can I just use apt-get, or should I use some Mac tool?
1
vote
2answers
848 views

What's the difference between -sS and -sT on nmap?

What's the difference between -sS and -sT on nmap? Both commands give the same output (besides filtered ports/closed ports).
1
vote
3answers
497 views

NMAP sees open ports, but netstat doesn't show listeners on them

I just scanned my PC remotely with zenmap, and see a number of open ports not related to any services I'm providing. Redacted list of ports: PORT STATE SERVICE 32/tcp filtered unknown 406/...
1
vote
2answers
212 views

Nmap runs slower as root than normal user

I am working on a bash script to enable automatic detection and remote control of my company's proprietary data recorders. The recorders run a custom version of linux and are essentially powerful pis ...
1
vote
2answers
485 views

Nmap's options beginning with P

Recently, I've been learning details about nmap scanner, with the help of tcpdump and wireshark. In order to find underlying behavior on nmap, I specified a dummy port 9527 and a command line like '...