Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

learn more… | top users | synonyms

0
votes
1answer
6 views

zenmap/nmap vs SoftPerfect Network Scanner

Do you use both or either or neither? Which one do you like or prefer? I like the double reverse lookup feature on SoftPerfect Network Scanner. Is similar feature also available on nmap? If so, what ...
0
votes
1answer
22 views

Using nmap responsibly towards learning and understanding the restrictions to safeguard myself?

I hope this thread doesn't get yanked to fast and if you have any negative feedback for me in asking this question please take it easy on me as I'm just a beginner trying to learn more in the most ...
0
votes
1answer
18 views

Nmap OS detection outputs fingerprints only

I've tried running nmap several times for OS detection, however I never get sucess. It would output "Too many fingerprints match this host to give specific OS details", or for example, Nmap scan ...
0
votes
0answers
12 views

NMAP from windows 7 - nothing found?

Attempting to use nmap (via 'zenmap') on Win7 pro. It's telling me that no hosts are found even though I'm fairly certain all is well. What I've tried: the command line (just to be sure) - same ...
0
votes
1answer
21 views

How to get nmap to show ftp banner / welcome message?

What are the commands to get nmap to show ftp banner responses?
0
votes
0answers
18 views

nmap recognizes android device not in a scan area of more than 3 ips

this page was recommended to me by stackoverflow therefore I ask my question again here. I have performed some nmap scans, yet I have found out, that the scan over a larger area provides more ...
0
votes
0answers
10 views

nmap buffering output, any way to get faster output?

I'm running nmap against the 256 IPs on my local network. $ nmap -sS -p 80,8080,443,8888 192.168.1.1/24 | less I'd like interactive output piped to less, that I can view as the scan progresses. ...
1
vote
1answer
26 views

what's hops unity in network context

I have scanned a remote server using nmap : And i get the following OUTPUT : Network Distance: 22 hops What's hops unity? And , is there a relationship among the others unities of distance ...
0
votes
1answer
28 views

ADSL device providing No NAT DMZ alongside NAT (IPv4)

I have an ADSL modem/router/switch which performs NAT. It does this even for the one host it can be configured to provide a DMZ. I want to be able to perform Nmap scans from a specific host and there ...
1
vote
1answer
800 views

Kali Linux Can't Find Any Computer On Network

I'm trying nmap and arp. When i'm execute "arp -a" only shows myhome.mynet ([my_ip]) at [MAC_ADDRESS] [ether] on wlan0 And when i'm trying to nmap [my_ip] it shows Starting Nmap 6.40 ( ...
1
vote
2answers
88 views

Why would ping succeed but nmap fail?

Why does Nmap report "Host seems down" when a simple ping succeeds? me@computer:~$ ping 123.45.67.89 PING 123.45.67.89 (123.45.67.89) 56(84) bytes of data. 64 bytes from 123.45.67.89: icmp_req=1 ...
1
vote
1answer
38 views

How does Nmap decide which DNS servers to use?

I had a problem using Nmap which turned out to be down the list of DNS servers Nmap was using for reverse DNS. There were 2 correct DNS servers and two strange ones. The problem was solved/worked ...
2
votes
2answers
297 views

Why is Nmap slow on my Windows 8.1 laptop?

Nmap is so slow as to be almost unusable on my Windows 8.1 laptop. I'm using Nmap 6.40 and it's taking more than a minute to run a simple check that runs in a fraction of a second on other computers ...
0
votes
2answers
138 views

How can I find private IP address of a device?

I 'm trying to detect IP address of a Wireless Access Point device, connected via Ethernet on my router. Router's configuration page shows status of the Ethernet port is up, but no device connected. ...
0
votes
1answer
59 views

After I switch default SSH ports, why does NMAP display port service as “down”

Running Ubuntu 13.04, I edit sshd_config to change Port 22 to Port 2022 When I reload my sshd service and nmap the server from my local machine, I get this: PORT STATE SERVICE 2022/tcp open ...
1
vote
1answer
38 views

Linux distribution detection with Nmap

When I run Nmap with OS detection it delivers the kernel version of the Linux host instead of the name of the Distribution. Nessus does Os detection based on banners ...
0
votes
0answers
45 views

NMAP scan on a device on an external 3G network

I am getting my hands dirty my learning nmap these days. After already learning the basics, now I am trying to find the OS and other details of a device which is on an external 3g network (it is a ...
1
vote
3answers
107 views

Quick way to scan for opened ports on local network according to a list

How can I quickly find out whether port 80 is open/listening on a server via a bash script? Normally on all workstations the daemon is running, but sometimes it fails. I use the following command to ...
1
vote
1answer
203 views

Nmap doesn't perform the script supplied as an argument

I'm running Kali Linux and I'm trying to run a nmap script against a host in the lab. The command I'm entering and the output is: root@kali:/usr/share/nmap/scripts# nmap --script dns-fuzz ...
0
votes
1answer
97 views

How to get device name from scan like nmap on Linux

I know that I can use a tool like NMAP or arp-scan on Linux to identify the IP and MAC addresses of all devices on my local network. I also know that arp-scan will do a MAC address lookup to get the ...
0
votes
0answers
65 views

Nmap doesn't use the script supplied in argument

I'm running under Kali Linux and I'm trying to run a script against a host in the lab. The command I'm entering and the output is: root@kali-vm:~# nmap --script smb-enum-users.nse -p445 192.168.1.1 ...
0
votes
1answer
77 views

Reconciling nmap, fping output

I am trying to understand the local network I am on. Public IP is 23.23.23.23, say. Output of some common commands: charles@ely:~$ ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc ...
2
votes
1answer
59 views

How to list hosts on the current network without knowing the subnet in advance?

The following 2 questions have been useful for finding hosts on a target network: - http://superuser.com/q/311019/45927 - http://security.stackexchange.com/q/36198/35859 However, answers in both ...
0
votes
0answers
23 views

Find OS by interpreting TCP/IP fingerprints when using nmap [duplicate]

When I ran the command: nmap -O ip_address to identify the OS, I got the following result: OS:SCAN(V=5.05BETA1%D=8/23%OT=22%CT=1%CU=42341%PV=N%DS=0%DC=L%G=Y%TM=4A91CB ...
0
votes
1answer
125 views

Ping via nmap all possible private IPv4 addresses

Is there any way to ping via nmap (using one command) all the possible private IPv4 addresses from: 192.168.0.0 - 192.168.255.255. The number of all combinations is 65536.
1
vote
0answers
73 views

Why will nmap not update for me?

I'm currently running nmap 6.25 on Mac OSX 10.8.5. I tried to download the pre-compiled DMG bundle for 6.40 and install it. After installation it still shows me I have 6.25: hehe~ ➙ nmap -V Nmap ...
1
vote
1answer
1k views

Setting up the metasploitable in virtualbox

I'm supposed to try and use kali to do exploits on metasploitable, but I'll burn that bridge when I get there. My question right now is: How do I set up a host only network on virtualbox? I heard ...
0
votes
0answers
56 views

Nmap spoofing function

I try to use nmap to spoof the IP address inside my network (LAN) but I'm having no luck. I used nmap --iflist (my actual IP address on the network is: 129.110.11.58) and went for eth0 for the -e ...
0
votes
1answer
240 views

what can filter a port on Fedora 19 besides router, firewall and selinux?

I am trying to use seafile which seems very nice. Unfortunately I have an issue that I fail to explain. From my two fedora 19 machines, nmap says port 12001 is filtered on the distant (say private) ...
0
votes
2answers
93 views

Is it possible to find which ip is going to a website? [closed]

We have someone that keeps trying to connect to our email host and after a few attempts of trying to log in (incorrectly) we are then blocked. We then have to call and unblock. Less then having ...
4
votes
1answer
278 views

How to easily determine, which outbound ports aren't blocked by firewall

I'm behind fairly restrictive firewall regarding ports, that can be used for connecting outside. I'm also running service on my remote box, and I want to connect to it. Problem is, that I'm unable to ...
2
votes
1answer
2k views

How does nmap calculate the difficulty of TCP sequence prediction?

I am learning how nmap operates by testing it with another workstation in my network. When I entered nmap -v -A -sS 192.xxx.xxx.xxx Part of the output produced the line below. TCP Sequence ...
1
vote
1answer
284 views

Changed port service from http to http-proxy

I have Apache running on 192.168.0.201 and listening to Port 80. namp shows me that Port 80/TCP is open and service is http. [root@desktop ~]# nmap -p 80 -sT 192.168.0.201 Starting Nmap 5.51 ( ...
1
vote
0answers
357 views

How to close suspicious port 999 garcon, is it malware?

On Mac OSX, I ran the command nmap localhost and I found I have this suspicious open port: 999/tcp open garcon Then I tried to see if there is an associated process, but nothing shows up with ...
0
votes
1answer
31 views

Nmap not returning hostnames when connected to 2 networks

I've the following configuration : 1 computeur connected a 1 network over Wifi and another network over ethernet. These 2 network are totally independant. I'm using nmap (6.00) to check which ...
1
vote
1answer
94 views

Penetration testing with WMAP, only for my domain, not the others with the same IP?

My domain got massively hacked, so I'm doing some penetration testing with it using WMAP and NMAP etc. However, I believe it's on shared hosting, so running tests on 182.34.xx.xxx (the IP address for ...
0
votes
1answer
953 views

How can I use a bash script to run nmap and capture both IP and hostname?

I want to scan my network; and return an output like this: Network Scan for 192.168.0.* 192.168.0.1 computer1 192.168.0.2 computer2 192.168.0.3 computer5 echo Network Scan nmap -sP -n ...
3
votes
1answer
5k views

How to find which ports are blocked?

I have root on two machines A and B and I would like to know which ports can't be accessed on B from A. Is there some way to run a command line application on B that listens on all ports and then run ...
0
votes
0answers
61 views

Network Probes, Identifying network slowdowns?

I have a buddy with an extensive wireless N network, he has 1 Linksys E4200, with several other Linksys E3200's on the same LAN. He also has a Sonos Wireless sound system and often complains of ...
0
votes
0answers
749 views

Server: Microsoft-HTTPAPI/2.0 running on port 10234 on my Windows 7 pc?

I've recently set up a home server and spent some time working on the security. One of the tools I've been using nmap which I pointed at my Windows 7 desktop. It showed an unknown service on port ...
1
vote
0answers
280 views

Metasploit scanners not working correctly

When I run db_nmap (or almost any scanner: ipidseq, syn, arp_swepp, etc.) from msfconsole I get this: msf > db_nmap -sS -A -v 192.168.0.13 [*] Nmap: Starting Nmap 5.61TEST4 ( http://nmap.org ) at ...
1
vote
2answers
852 views

Nmap showing 113/tcp closed ident for every IP

I'm trying to find a free IP address on a network that doesn't use DHCP. I decided to run an intense scan using Nmap from 10.0.5.0 to 10.0.5.255. (I know this isn't the best way to find an unused IP ...
1
vote
2answers
479 views

NMAP Root different from Under Privileged user

When I use as root nmap -sP -n hostaddress I get the mac address of the hostaddress device but when I change to a different user with less privileges I do not get the mac address as a return. ...
0
votes
2answers
272 views

How to find filtered ports using nmap

How do i list all the filtered ports using nmap? i have used the command sudo nmap -sS -v how can we print the list of the ports should i use -sU ,-sX or any other parameter
0
votes
1answer
113 views

How can I monitor ports on Windows?

What is the simplest way on "local" (1*) Windows, for known ports, to: Find out if it is used. Find out as much as possible about what is behind the port. Find out as much as possible about traffic ...
2
votes
3answers
4k views

nmap says 0 hosts up even though I can ping

I'm running Metasploit from Win 7 x64, and I've set up my Metasploitable 2 virtual machine on VMware Player. I can ping Metasploitable's IP address from the Metasploit console, however if I use nmap ...
0
votes
1answer
282 views

Are there any security problems within my CentOS system? [closed]

I have tried to use Nmap to test the ports of my server:) The details are as follows. Are there some vulnerable ports on my server? If yes, why is it vulnerable, and what should I do in order to ...
1
vote
2answers
840 views

In Windows 7, how do I find the IP of a device (Raspberry Pi) attached via Ethernet?

I want to determine the IP of my Raspberry Pi which is attached to my PC via Ethernet and has a dynamic IP.
2
votes
1answer
116 views

How to set TCP SEQ number generation

There is a Windows 2000 system, that when I scanned it, it said, that the TCP SEQ number prediction is really low (nmap – trivial joke). While I'm still trying to verify that, I wondered, how could ...
2
votes
1answer
102 views

nmap -sV giving inconsistent results

I am scanning two networks (of which one I know very well and the other is managed by someone else and information is sparse). The aim is to check compliance (presence of an AV listener on the ...