Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

learn more… | top users | synonyms

0
votes
2answers
16 views

random open ports on nmap scan

My machine has the IP address 192.168.1.50 . When i do the following nmap scan nmap -p- -sT -Pn 192.168.1.50 from the same machine, i get at each scan some random open ports. And these random open ...
0
votes
1answer
11 views

NMap save results to separate files

I was wondering if there was any way to specify a range of IP addresses and save the scan results for each to a sepperate file in the same folder. So scan 1.1.1.1, 1.1.1.2, 1.1.1.3 and they all save ...
0
votes
1answer
27 views

how to discover up hosts in a local network with nmap

I know that this question was asked a lot, but all the answers given are with the ping scan of nmap nmap -sP 192.168.1.1/24. The problem with this scan is that it doesn't detect hosts that doesn't ...
0
votes
1answer
31 views

Port forwarding error

I am very new to networks, and I am trying to access a computer which has no public ip from outside its private network. The layout of the network looks like this: PC <----> ...
0
votes
0answers
2 views

Can I tell zenmap to apply a command to all known hosts?

In zenmap (an nmap gui), you can apply various scans, and it remembers the results, keeping a list of hosts you have successfully scanned. Can you tell it to apply a command against all known hosts ...
0
votes
1answer
39 views

NMAP Always says host is down (when using -Pn it says ports filtered)

I am running Kali 2.0 (Kali sana) and I have problem with NMAP, it everytime says that host is down when i scan it (even myself with firewall off)... When I try online nmap ...
0
votes
0answers
15 views

Can't get nmap info from Brainpan2

I'm trying to setup an environment in VirtualBox for exploiting Brainpan2 (from Vulnhub). I created 2 VMs (Brainpan2 and Kali) but when I try to perform an nmap -A scan on the other 3 IP addresses on ...
0
votes
1answer
226 views

Nmap won't run any scripts

When I try to run a Nmap script on Kali Linux I get the following: root@known:~# nmap --script smb-check-vulns.nse 192.168.1.111 Starting Nmap 7.00 ( https://nmap.org ) at 2015-12-04 03:45 EST NSE: ...
1
vote
1answer
26 views

Why would “nmap -p -” miss an open port?

I ran nmap -p - against a system that I knew to have at least one listening service. The only output that was returned was for port 113 (ident), which showed "closed". I ran nmap again, but this time ...
1
vote
1answer
102 views

How we can open the filtered port again?

I had a root access from a Server over SSH on 2200 port but, recently I can not connect to it ,so after checking via nmap turns out the port is filtered by admin or someone . Host is up (0.011s ...
1
vote
2answers
100 views

Is a firewall blocking me from accessing VZW's website?

I am not able to get on Verizon Wireless's website http://www.verizonwireless.com/ from any computer on my LAN. Chrome and Firefox just return with a connection timed out. However, the name resolves ...
0
votes
1answer
109 views

Scanning a network and SSH each IP until I get in through SSH

Normally, I would SSH into that machine using: ssh user1@123.45.67.8 That server in my network is forced to use DHCP in the subnet (134.96.90.0). And everytime it shuts down, I have to go find the ...
0
votes
1answer
278 views

Installing nmap and keeping it undetectable

I have a administrative computer fully equipped with antivirus (avg,norton,malbytes. etc) that I want to install ncat(nmap) on and keep it as close to undetectable as possible. How would I do this?
0
votes
1answer
56 views

nmap -sn and -sL produce different results for the same host

When I scan the whole network it shows 3 hosts are up: pi@Pi /Z $ nmap -sn 192.168.0.0/24 Starting Nmap 6.00 ( http://nmap.org ) at 2015-09-09 00:48 EDT Nmap scan report for 192.168.0.100 Host is up ...
0
votes
2answers
45 views

How to SSH to and connect back to original network?

Once I’ve connected to my Linux Machine(B) over the internet from my current PC(A), is there a way to run software on that machine(B) on the local one(A) so that it uses the original network. For ...
1
vote
1answer
60 views

With nmap and awk, displaying any http ports with the host's ip

I scanned around 50 hosts on a network with this command: nmap -sV -iL sweep_ips.txt -oG result.txt ex: ... Host: 192.168.x.x () Ports: 8000/open/tcp//http//Apache httpd 2.2.3 ((CentOS))/ ...
1
vote
2answers
682 views

Scanning my public IP address with Nmap finds TCP port 1720 open, is this a security concern?

When scanning my public ip address with Nmap I found out that I have open port on 1720/TCP. According Nmap service on it is H.323/Q.931. Researching uses of this port also brings up Microsoft ...
2
votes
0answers
45 views

Scan using nmap on a different network

My system is connected to a router and that router is the part of LAN. How do I scan other systems that are a part of the LAN to which my router is connected ? My Router's DHCP allocates C-class ...
0
votes
0answers
18 views

Edit nmap database for os detection

I try to discover a network topology by using nmap. Part of the job is detect device type. I want to add my device information into the nmap database (which is not available before). Of course, I ...
1
vote
1answer
94 views

Detect RIPv1 via NMAP

Due to the recent increase of reflection attacks noted by Akamais security teams using original RIP(classful, depreciated) I'm interested to see if some of the CPE running within a network segment ...
0
votes
1answer
70 views

nmap: Scantype - not supported

When I run the following nmap command to test against my VM's: nmap --spoof-mac Cisco --data-length 24 -T paranoid -max-hostgroup 1 -max-parallelism 10 -PN -f -D 10.1.20.5,RND:5,ME -v -n -sS -sV-oA ...
0
votes
0answers
72 views

grep - Grepping several lines from Nmap output

My scan root@kali:~# nmap -Pn 5.2.167.13 Starting Nmap 6.47 ( http://nmap.org ) at 2015-07-07 14:33 EDT Nmap scan report for static-5-2-167-13.rdsnet.ro (5.2.167.13) Host is up (0.010s latency). Not ...
0
votes
0answers
99 views

Write error Broken pip - Kali - Python

I have a problem im trying to perform grepping over nmap scan saved text file using python code but i get this error: cut: the delimiter must be a singel character Try 'cut --help' for more ...
0
votes
0answers
111 views

Nmap can't scan Internet

I'm a chinese student,and my English is poor,so please forgive me. I have an openvz vps which is from bandwagonhost.com。 I install nmap successfully. When I nmap -Pn -p- 127.0.0.1 It's OK. BUT when ...
1
vote
1answer
97 views

Why Armitage nmap results differs from msfconsole ones?

More specific in msf console why when I 'nmap -v -A 192.168.1.8' I get all the results I expect (OS detection windows 8.1 etc), while when I do the same from armitage I get unknown? I have the same ...
0
votes
1answer
71 views

how to scan non-default SSH port

for example port SSH is 4020 nmap 192.168.1.1 -sV The result is : PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd where is SSH port ? I try command below to test ssh ssh ...
0
votes
0answers
42 views

How can I find out what ports I can use via a proxy;ie which are open

I use a proxy. I connect to it, but I cannot configure it. I access security cameras from the proxied location to one that is not. I got lucky in setting up the open ports to accept connection to my ...
0
votes
1answer
50 views

Ping sweep LAN without specifying IP

I know I can ping sweep my LAN by doing something like nmap -sP 192.168.0.0/24 which works just fine. I was wondering if there was anyway nmap could figure out the range for the local subnet on it's ...
0
votes
0answers
109 views

Finding ports that are not showing up as available

Disclaimer: I have looked at the other threads on "Find processes using a port" This is in reference to a question on stackoverflow ...
1
vote
3answers
299 views

different behavior: “sudo nmap” vs just “nmap”?

I'm attempting to do a simple port scan with nmap: $ nmap 192.168.56.101 Starting Nmap 6.47 ( http://nmap.org ) at 2015-03-10 19:30 IST Nmap scan report for 192.168.56.101 Host is up (0.0048s ...
0
votes
0answers
193 views

how do I establish whether Glassfish is ready or not to accept JMS connections?

Working from a sample producer, which uses gtools, and by changing the connection parameters from localhost to the ip address for doge: def jms = new ...
0
votes
1answer
114 views

Bash - Parsing XML output of nmap

I am trying to write a bash script that will take port id I retrieve from an nmap command, and then use those ports to send a file using netcat. So I got some basic knowledge using this link, How can ...
0
votes
1answer
94 views

Why does a NMAP scan give different results depending on whether it's run from inside or outside a LAN?

I am testing/setting up a Thomson TG585v7 Router/Firewall. Results when running nmap from a computer inside the LAN: $ sudo nmap -O 210.86.xxx.xxx Starting Nmap 6.40 ( http://nmap.org ) at ...
1
vote
0answers
59 views

If nmap reports a port is open, does that ALSO mean a service is listening on the port?

I have a Thompson TG585v7 router/firewall whose firewall is configured to FORWARD several ports to a computer X54 within the LAN. These ports are in the range 1024 through to 2500 That X54 ...
0
votes
2answers
934 views

How to reverse arp using nping for Windows

I would like to send a reverse ARP to resolve an IP address given a MAC address using nping for Windows. The documentation is not clear on how this should work and I'm unable to find any examples ...
0
votes
1answer
443 views

Detect if iPhone is active on network

I want to detect if my iPhone connects / is connected to my LAN, so I can turn on the lights. This is pretty close to this question How to detect an iPhone connecting a network? I want to detect if ...
0
votes
1answer
392 views

Troubleshoot a hung nmap scan?

I am attempting to scan a host with nmap and it appears the program is hung. The scan is 1 host, all IPv4 TCP and UDP ports. The host is running in a virtual machine, and the target is a live host on ...
0
votes
1answer
35 views

How to detect ips using nmap?

I am currently working on demonstrating Man in middle Attack foe which I am using my phone as a Victim and my PC running ubuntu 14.04LTS as attacker. I am using nmap to ping my phone to check if its ...
2
votes
2answers
5k views

What is the recommended way to get nmap on OSX?

Can I just use apt-get, or should I use some Mac tool?
1
vote
2answers
409 views

What's the difference between -sS and -sT on nmap?

What's the difference between -sS and -sT on nmap? Both commands give the same output (besides filtered ports/closed ports).
1
vote
3answers
392 views

NMAP sees open ports, but netstat doesn't show listeners on them

I just scanned my PC remotely with zenmap, and see a number of open ports not related to any services I'm providing. Redacted list of ports: PORT STATE SERVICE 32/tcp filtered unknown ...
1
vote
2answers
182 views

Nmap runs slower as root than normal user

I am working on a bash script to enable automatic detection and remote control of my company's proprietary data recorders. The recorders run a custom version of linux and are essentially powerful pis ...
1
vote
2answers
303 views

Nmap's options beginning with P

Recently, I've been learning details about nmap scanner, with the help of tcpdump and wireshark. In order to find underlying behavior on nmap, I specified a dummy port 9527 and a command line like ...
0
votes
1answer
26 views

how to print pattern match

I am trying to get versions for services in a gnmap file. A typical line looks like: Host: 192.x.x.x () Ports: 21/open/tcp//ftp//HP JetDirect ftpd/, 23/open/tcp//telnet//HP JetDirect printer ...
0
votes
1answer
156 views

Nmap random ip address scan order

There is an -iR, which allows to scan completely random hosts on the internet, but how do I scan, for example, a random subset of 10.0.0.0/8?
1
vote
2answers
67 views

Find new ips on network

The solution I want to solve is to discover newly connected ip (and preferably mac and vendor) on the local network. So far I've tried arp-scan and nmap. I like arp-scan mainly because it's fast ...
0
votes
1answer
819 views

nmap output difference between -sL and -sP

I am trying to generate a list of currently active hosts. I get this by doing -sP 192.168.1.0/24 Starting Nmap 6.40 ( http://nmap.org ) at 2014-09-24 19:40 MDT RTTVAR has grown to over 2.3 seconds, ...
2
votes
1answer
135 views

Nmap incredibly slow on my router

I'm attempting to use nmap on my Tomato router (Linux 2.6) to do a quick survey of a particular subnet on my LAN. Even when I set it to scan a single client it takes close to four minutes to complete. ...
0
votes
1answer
441 views

Why would an arp table be incomplete?

Last night I connected to a local BT Fon network that my housemate was already on. My aim was to find his mac address, so I did an arp -a command (from OS X) and it returned only the router address. ...
2
votes
1answer
741 views

Nmap shows 554 and 7070 open on EVERY machine even when they are closed/filtered

Every single machine I scan shows port 7070 and port 554 as open regardless if the ports are closed/filtered. It will still show those two ports as open even if the target is offline (and the scan is ...