Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

learn more… | top users | synonyms

1
vote
1answer
22 views

What are the default nmap options?

Which options are used by default, when the user fires # nmap target without any explicit option? I am going to write the defaults of the three options I consider the most important. It would be ...
0
votes
2answers
70 views

What is the difference between nmap and netstat?

I am trying to learn a little about networking and I was hoping to get some help. Does anyone know the difference between nmap and netstat? I kind of know how to use them and how to check ports but ...
0
votes
0answers
54 views

nmap on metasploitable outputs all ports filtered

I wanted to get started with metaploit on kali. I have set up Kali Linux in VirtualBox and everything works fine. Then I set up Metasploitable 2 on vmwareplayer. Now when I nmap metasploitable it ...
1
vote
2answers
33 views

With nmap is it possible to scan a private network from outside?

Is it possible for a hacker to scan my computer using this command: nmap 10.0.0.0/8 even if he is not connected to my network ? (and if my private IP is 10.0.2.24 for instance) Thanks
-2
votes
2answers
959 views

What is another use for port 8080/8443 other than a proxy?

I see alot of servers with port 8080 open. Most times I am able to connect to the proxy server, but the majority are unable to make requests outside the network, or internally. What is the purpose of ...
0
votes
0answers
12 views

Identifying device type remotely

I am writing an IP scanner in C#... I'm not looking for coding help, but rather the how do I determine the device type. Using WMI and remote registry I am able to get all information I want from ...
0
votes
1answer
37 views

Close a TCP connection using nmap

I am trying to close connections in command line. For instance, I am trying to close my SSH connection with this Nmap command: $ sudo nmap -p 22 --scanflags RST <mySSHServerPublicIP> $ sudo ...
0
votes
2answers
32 views

random open ports on nmap scan

My machine has the IP address 192.168.1.50 . When i do the following nmap scan nmap -p- -sT -Pn 192.168.1.50 from the same machine, i get at each scan some random open ports. And these random open ...
0
votes
1answer
23 views

NMap save results to separate files

I was wondering if there was any way to specify a range of IP addresses and save the scan results for each to a sepperate file in the same folder. So scan 1.1.1.1, 1.1.1.2, 1.1.1.3 and they all save ...
0
votes
1answer
48 views

how to discover up hosts in a local network with nmap

I know that this question was asked a lot, but all the answers given are with the ping scan of nmap nmap -sP 192.168.1.1/24. The problem with this scan is that it doesn't detect hosts that doesn't ...
0
votes
1answer
42 views

Port forwarding error

I am very new to networks, and I am trying to access a computer which has no public ip from outside its private network. The layout of the network looks like this: PC <----> ...
0
votes
0answers
2 views

Can I tell zenmap to apply a command to all known hosts?

In zenmap (an nmap gui), you can apply various scans, and it remembers the results, keeping a list of hosts you have successfully scanned. Can you tell it to apply a command against all known hosts ...
1
vote
1answer
120 views

NMAP Always says host is down (when using -Pn it says ports filtered)

I am running Kali 2.0 (Kali sana) and I have problem with NMAP, it everytime says that host is down when i scan it (even myself with firewall off)... When I try online nmap ...
0
votes
0answers
16 views

Can't get nmap info from Brainpan2

I'm trying to setup an environment in VirtualBox for exploiting Brainpan2 (from Vulnhub). I created 2 VMs (Brainpan2 and Kali) but when I try to perform an nmap -A scan on the other 3 IP addresses on ...
0
votes
1answer
1k views

Nmap won't run any scripts

When I try to run a Nmap script on Kali Linux I get the following: root@known:~# nmap --script smb-check-vulns.nse 192.168.1.111 Starting Nmap 7.00 ( https://nmap.org ) at 2015-12-04 03:45 EST NSE: ...
1
vote
1answer
37 views

Why would “nmap -p -” miss an open port?

I ran nmap -p - against a system that I knew to have at least one listening service. The only output that was returned was for port 113 (ident), which showed "closed". I ran nmap again, but this time ...
1
vote
1answer
235 views

How we can open the filtered port again?

I had a root access from a Server over SSH on 2200 port but, recently I can not connect to it ,so after checking via nmap turns out the port is filtered by admin or someone . Host is up (0.011s ...
1
vote
2answers
138 views

Is a firewall blocking me from accessing VZW's website?

I am not able to get on Verizon Wireless's website http://www.verizonwireless.com/ from any computer on my LAN. Chrome and Firefox just return with a connection timed out. However, the name resolves ...
0
votes
1answer
213 views

Scanning a network and SSH each IP until I get in through SSH

Normally, I would SSH into that machine using: ssh user1@123.45.67.8 That server in my network is forced to use DHCP in the subnet (134.96.90.0). And everytime it shuts down, I have to go find the ...
0
votes
1answer
380 views

Installing nmap and keeping it undetectable

I have a administrative computer fully equipped with antivirus (avg,norton,malbytes. etc) that I want to install ncat(nmap) on and keep it as close to undetectable as possible. How would I do this?
0
votes
1answer
101 views

nmap -sn and -sL produce different results for the same host

When I scan the whole network it shows 3 hosts are up: pi@Pi /Z $ nmap -sn 192.168.0.0/24 Starting Nmap 6.00 ( http://nmap.org ) at 2015-09-09 00:48 EDT Nmap scan report for 192.168.0.100 Host is up ...
0
votes
2answers
52 views

How to SSH to and connect back to original network?

Once I’ve connected to my Linux Machine(B) over the internet from my current PC(A), is there a way to run software on that machine(B) on the local one(A) so that it uses the original network. For ...
1
vote
1answer
66 views

With nmap and awk, displaying any http ports with the host's ip

I scanned around 50 hosts on a network with this command: nmap -sV -iL sweep_ips.txt -oG result.txt ex: ... Host: 192.168.x.x () Ports: 8000/open/tcp//http//Apache httpd 2.2.3 ((CentOS))/ ...
1
vote
2answers
2k views

Scanning my public IP address with Nmap finds TCP port 1720 open, is this a security concern?

When scanning my public ip address with Nmap I found out that I have open port on 1720/TCP. According Nmap service on it is H.323/Q.931. Researching uses of this port also brings up Microsoft ...
2
votes
0answers
56 views

Scan using nmap on a different network

My system is connected to a router and that router is the part of LAN. How do I scan other systems that are a part of the LAN to which my router is connected ? My Router's DHCP allocates C-class ...
0
votes
0answers
19 views

Edit nmap database for os detection

I try to discover a network topology by using nmap. Part of the job is detect device type. I want to add my device information into the nmap database (which is not available before). Of course, I ...
1
vote
1answer
108 views

Detect RIPv1 via NMAP

Due to the recent increase of reflection attacks noted by Akamais security teams using original RIP(classful, depreciated) I'm interested to see if some of the CPE running within a network segment ...
0
votes
1answer
121 views

nmap: Scantype - not supported

When I run the following nmap command to test against my VM's: nmap --spoof-mac Cisco --data-length 24 -T paranoid -max-hostgroup 1 -max-parallelism 10 -PN -f -D 10.1.20.5,RND:5,ME -v -n -sS -sV-oA ...
0
votes
0answers
115 views

Write error Broken pip - Kali - Python

I have a problem im trying to perform grepping over nmap scan saved text file using python code but i get this error: cut: the delimiter must be a singel character Try 'cut --help' for more ...
0
votes
0answers
139 views

Nmap can't scan Internet

I'm a chinese student,and my English is poor,so please forgive me. I have an openvz vps which is from bandwagonhost.com。 I install nmap successfully. When I nmap -Pn -p- 127.0.0.1 It's OK. BUT when ...
1
vote
1answer
109 views

Why Armitage nmap results differs from msfconsole ones?

More specific in msf console why when I 'nmap -v -A 192.168.1.8' I get all the results I expect (OS detection windows 8.1 etc), while when I do the same from armitage I get unknown? I have the same ...
0
votes
1answer
84 views

how to scan non-default SSH port

for example port SSH is 4020 nmap 192.168.1.1 -sV The result is : PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd where is SSH port ? I try command below to test ssh ssh ...
0
votes
1answer
54 views

Ping sweep LAN without specifying IP

I know I can ping sweep my LAN by doing something like nmap -sP 192.168.0.0/24 which works just fine. I was wondering if there was anyway nmap could figure out the range for the local subnet on it's ...
1
vote
3answers
419 views

different behavior: “sudo nmap” vs just “nmap”?

I'm attempting to do a simple port scan with nmap: $ nmap 192.168.56.101 Starting Nmap 6.47 ( http://nmap.org ) at 2015-03-10 19:30 IST Nmap scan report for 192.168.56.101 Host is up (0.0048s ...
1
vote
1answer
143 views

Bash - Parsing XML output of nmap

I am trying to write a bash script that will take port id I retrieve from an nmap command, and then use those ports to send a file using netcat. So I got some basic knowledge using this link, How can ...
0
votes
1answer
122 views

Why does a NMAP scan give different results depending on whether it's run from inside or outside a LAN?

I am testing/setting up a Thomson TG585v7 Router/Firewall. Results when running nmap from a computer inside the LAN: $ sudo nmap -O 210.86.xxx.xxx Starting Nmap 6.40 ( http://nmap.org ) at ...
1
vote
0answers
67 views

If nmap reports a port is open, does that ALSO mean a service is listening on the port?

I have a Thompson TG585v7 router/firewall whose firewall is configured to FORWARD several ports to a computer X54 within the LAN. These ports are in the range 1024 through to 2500 That X54 ...
0
votes
2answers
2k views

How to reverse arp using nping for Windows

I would like to send a reverse ARP to resolve an IP address given a MAC address using nping for Windows. The documentation is not clear on how this should work and I'm unable to find any examples ...
0
votes
1answer
743 views

Detect if iPhone is active on network

I want to detect if my iPhone connects / is connected to my LAN, so I can turn on the lights. This is pretty close to this question How to detect an iPhone connecting a network? I want to detect if ...
0
votes
1answer
673 views

Troubleshoot a hung nmap scan?

I am attempting to scan a host with nmap and it appears the program is hung. The scan is 1 host, all IPv4 TCP and UDP ports. The host is running in a virtual machine, and the target is a live host on ...
0
votes
1answer
40 views

How to detect ips using nmap?

I am currently working on demonstrating Man in middle Attack foe which I am using my phone as a Victim and my PC running ubuntu 14.04LTS as attacker. I am using nmap to ping my phone to check if its ...
5
votes
2answers
8k views

What is the recommended way to get nmap on OSX?

Can I just use apt-get, or should I use some Mac tool?
1
vote
2answers
711 views

What's the difference between -sS and -sT on nmap?

What's the difference between -sS and -sT on nmap? Both commands give the same output (besides filtered ports/closed ports).
1
vote
3answers
471 views

NMAP sees open ports, but netstat doesn't show listeners on them

I just scanned my PC remotely with zenmap, and see a number of open ports not related to any services I'm providing. Redacted list of ports: PORT STATE SERVICE 32/tcp filtered unknown ...
1
vote
2answers
205 views

Nmap runs slower as root than normal user

I am working on a bash script to enable automatic detection and remote control of my company's proprietary data recorders. The recorders run a custom version of linux and are essentially powerful pis ...
1
vote
2answers
423 views

Nmap's options beginning with P

Recently, I've been learning details about nmap scanner, with the help of tcpdump and wireshark. In order to find underlying behavior on nmap, I specified a dummy port 9527 and a command line like ...
0
votes
1answer
30 views

how to print pattern match

I am trying to get versions for services in a gnmap file. A typical line looks like: Host: 192.x.x.x () Ports: 21/open/tcp//ftp//HP JetDirect ftpd/, 23/open/tcp//telnet//HP JetDirect printer ...
0
votes
1answer
216 views

Nmap random ip address scan order

There is an -iR, which allows to scan completely random hosts on the internet, but how do I scan, for example, a random subset of 10.0.0.0/8?
1
vote
2answers
70 views

Find new ips on network

The solution I want to solve is to discover newly connected ip (and preferably mac and vendor) on the local network. So far I've tried arp-scan and nmap. I like arp-scan mainly because it's fast ...
1
vote
1answer
1k views

nmap output difference between -sL and -sP

I am trying to generate a list of currently active hosts. I get this by doing -sP 192.168.1.0/24 Starting Nmap 6.40 ( http://nmap.org ) at 2014-09-24 19:40 MDT RTTVAR has grown to over 2.3 seconds, ...