Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

learn more… | top users | synonyms

0
votes
1answer
55 views

Kali Linux Can't Find Any Computer On Network

I'm trying nmap and arp. When i'm execute "arp -a" only shows myhome.mynet ([my_ip]) at [MAC_ADDRESS] [ether] on wlan0 And when i'm trying to nmap [my_ip] it shows Starting Nmap 6.40 ( ...
1
vote
2answers
15 views

Why would ping succeed but nmap fail?

Why does Nmap report "Host seems down" when a simple ping succeeds? me@computer:~$ ping 123.45.67.89 PING 123.45.67.89 (123.45.67.89) 56(84) bytes of data. 64 bytes from 123.45.67.89: icmp_req=1 ...
1
vote
1answer
24 views

How does Nmap decide which DNS servers to use?

I had a problem using Nmap which turned out to be down the list of DNS servers Nmap was using for reverse DNS. There were 2 correct DNS servers and two strange ones. The problem was solved/worked ...
1
vote
2answers
91 views

Why is Nmap slow on my Windows 8.1 laptop?

Nmap is so slow as to be almost unusable on my Windows 8.1 laptop. I'm using Nmap 6.40 and it's taking more than a minute to run a simple check that runs in a fraction of a second on other computers ...
0
votes
2answers
75 views

How can I find private IP address of a device?

I 'm trying to detect IP address of a Wireless Access Point device, connected via Ethernet on my router. Router's configuration page shows status of the Ethernet port is up, but no device connected. ...
0
votes
1answer
43 views

After I switch default SSH ports, why does NMAP display port service as “down”

Running Ubuntu 13.04, I edit sshd_config to change Port 22 to Port 2022 When I reload my sshd service and nmap the server from my local machine, I get this: PORT STATE SERVICE 2022/tcp open ...
1
vote
1answer
24 views

Linux distribution detection with Nmap

When I run Nmap with OS detection it delivers the kernel version of the Linux host instead of the name of the Distribution. Nessus does Os detection based on banners ...
0
votes
0answers
25 views

NMAP scan on a device on an external 3G network

I am getting my hands dirty my learning nmap these days. After already learning the basics, now I am trying to find the OS and other details of a device which is on an external 3g network (it is a ...
1
vote
3answers
79 views

Quick way to scan for opened ports on local network according to a list

How can I quickly find out whether port 80 is open/listening on a server via a bash script? Normally on all workstations the daemon is running, but sometimes it fails. I use the following command to ...
1
vote
1answer
91 views

Nmap doesn't perform the script supplied as an argument

I'm running Kali Linux and I'm trying to run a nmap script against a host in the lab. The command I'm entering and the output is: root@kali:/usr/share/nmap/scripts# nmap --script dns-fuzz ...
0
votes
1answer
61 views

How to get device name from scan like nmap on Linux

I know that I can use a tool like NMAP or arp-scan on Linux to identify the IP and MAC addresses of all devices on my local network. I also know that arp-scan will do a MAC address lookup to get the ...
0
votes
0answers
40 views

Nmap doesn't use the script supplied in argument

I'm running under Kali Linux and I'm trying to run a script against a host in the lab. The command I'm entering and the output is: root@kali-vm:~# nmap --script smb-enum-users.nse -p445 192.168.1.1 ...
0
votes
1answer
53 views

Reconciling nmap, fping output

I am trying to understand the local network I am on. Public IP is 23.23.23.23, say. Output of some common commands: charles@ely:~$ ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc ...
2
votes
1answer
45 views

How to list hosts on the current network without knowing the subnet in advance?

The following 2 questions have been useful for finding hosts on a target network: - http://superuser.com/q/311019/45927 - http://security.stackexchange.com/q/36198/35859 However, answers in both ...
0
votes
0answers
23 views

Find OS by interpreting TCP/IP fingerprints when using nmap [duplicate]

When I ran the command: nmap -O ip_address to identify the OS, I got the following result: OS:SCAN(V=5.05BETA1%D=8/23%OT=22%CT=1%CU=42341%PV=N%DS=0%DC=L%G=Y%TM=4A91CB ...
0
votes
1answer
93 views

Ping via nmap all possible private IPv4 addresses

Is there any way to ping via nmap (using one command) all the possible private IPv4 addresses from: 192.168.0.0 - 192.168.255.255. The number of all combinations is 65536.
1
vote
0answers
60 views

Why will nmap not update for me?

I'm currently running nmap 6.25 on Mac OSX 10.8.5. I tried to download the pre-compiled DMG bundle for 6.40 and install it. After installation it still shows me I have 6.25: hehe~ ➙ nmap -V Nmap ...
1
vote
1answer
808 views

Setting up the metasploitable in virtualbox

I'm supposed to try and use kali to do exploits on metasploitable, but I'll burn that bridge when I get there. My question right now is: How do I set up a host only network on virtualbox? I heard ...
0
votes
0answers
50 views

Nmap spoofing function

I try to use nmap to spoof the IP address inside my network (LAN) but I'm having no luck. I used nmap --iflist (my actual IP address on the network is: 129.110.11.58) and went for eth0 for the -e ...
0
votes
1answer
226 views

what can filter a port on Fedora 19 besides router, firewall and selinux?

I am trying to use seafile which seems very nice. Unfortunately I have an issue that I fail to explain. From my two fedora 19 machines, nmap says port 12001 is filtered on the distant (say private) ...
0
votes
2answers
90 views

Is it possible to find which ip is going to a website?

We have someone that keeps trying to connect to our email host and after a few attempts of trying to log in (incorrectly) we are then blocked. We then have to call and unblock. Less then having ...
4
votes
1answer
171 views

How to easily determine, which outbound ports aren't blocked by firewall

I'm behind fairly restrictive firewall regarding ports, that can be used for connecting outside. I'm also running service on my remote box, and I want to connect to it. Problem is, that I'm unable to ...
0
votes
1answer
2k views

How does nmap calculate the difficulty of TCP sequence prediction?

I am learning how nmap operates by testing it with another workstation in my network. When I entered nmap -v -A -sS 192.xxx.xxx.xxx Part of the output produced the line below. TCP Sequence ...
1
vote
1answer
201 views

Changed port service from http to http-proxy

I have Apache running on 192.168.0.201 and listening to Port 80. namp shows me that Port 80/TCP is open and service is http. [root@desktop ~]# nmap -p 80 -sT 192.168.0.201 Starting Nmap 5.51 ( ...
1
vote
0answers
298 views

How to close suspicious port 999 garcon, is it malware?

On Mac OSX, I ran the command nmap localhost and I found I have this suspicious open port: 999/tcp open garcon Then I tried to see if there is an associated process, but nothing shows up with ...
0
votes
1answer
31 views

Nmap not returning hostnames when connected to 2 networks

I've the following configuration : 1 computeur connected a 1 network over Wifi and another network over ethernet. These 2 network are totally independant. I'm using nmap (6.00) to check which ...
1
vote
1answer
85 views

Penetration testing with WMAP, only for my domain, not the others with the same IP?

My domain got massively hacked, so I'm doing some penetration testing with it using WMAP and NMAP etc. However, I believe it's on shared hosting, so running tests on 182.34.xx.xxx (the IP address for ...
0
votes
1answer
673 views

How can I use a bash script to run nmap and capture both IP and hostname?

I want to scan my network; and return an output like this: Network Scan for 192.168.0.* 192.168.0.1 computer1 192.168.0.2 computer2 192.168.0.3 computer5 echo Network Scan nmap -sP -n ...
3
votes
1answer
4k views

How to find which ports are blocked?

I have root on two machines A and B and I would like to know which ports can't be accessed on B from A. Is there some way to run a command line application on B that listens on all ports and then run ...
0
votes
0answers
56 views

Network Probes, Identifying network slowdowns?

I have a buddy with an extensive wireless N network, he has 1 Linksys E4200, with several other Linksys E3200's on the same LAN. He also has a Sonos Wireless sound system and often complains of ...
0
votes
0answers
582 views

Server: Microsoft-HTTPAPI/2.0 running on port 10234 on my Windows 7 pc?

I've recently set up a home server and spent some time working on the security. One of the tools I've been using nmap which I pointed at my Windows 7 desktop. It showed an unknown service on port ...
1
vote
0answers
245 views

Metasploit scanners not working correctly

When I run db_nmap (or almost any scanner: ipidseq, syn, arp_swepp, etc.) from msfconsole I get this: msf > db_nmap -sS -A -v 192.168.0.13 [*] Nmap: Starting Nmap 5.61TEST4 ( http://nmap.org ) at ...
1
vote
2answers
680 views

Nmap showing 113/tcp closed ident for every IP

I'm trying to find a free IP address on a network that doesn't use DHCP. I decided to run an intense scan using Nmap from 10.0.5.0 to 10.0.5.255. (I know this isn't the best way to find an unused IP ...
1
vote
2answers
408 views

NMAP Root different from Under Privileged user

When I use as root nmap -sP -n hostaddress I get the mac address of the hostaddress device but when I change to a different user with less privileges I do not get the mac address as a return. ...
0
votes
2answers
238 views

How to find filtered ports using nmap

How do i list all the filtered ports using nmap? i have used the command sudo nmap -sS -v how can we print the list of the ports should i use -sU ,-sX or any other parameter
0
votes
1answer
109 views

How can I monitor ports on Windows?

What is the simplest way on "local" (1*) Windows, for known ports, to: Find out if it is used. Find out as much as possible about what is behind the port. Find out as much as possible about traffic ...
2
votes
3answers
3k views

nmap says 0 hosts up even though I can ping

I'm running Metasploit from Win 7 x64, and I've set up my Metasploitable 2 virtual machine on VMware Player. I can ping Metasploitable's IP address from the Metasploit console, however if I use nmap ...
0
votes
1answer
269 views

Are there any security problems within my CentOS system? [closed]

I have tried to use Nmap to test the ports of my server:) The details are as follows. Are there some vulnerable ports on my server? If yes, why is it vulnerable, and what should I do in order to ...
1
vote
2answers
699 views

In Windows 7, how do I find the IP of a device (Raspberry Pi) attached via Ethernet?

I want to determine the IP of my Raspberry Pi which is attached to my PC via Ethernet and has a dynamic IP.
2
votes
1answer
111 views

How to set TCP SEQ number generation

There is a Windows 2000 system, that when I scanned it, it said, that the TCP SEQ number prediction is really low (nmap – trivial joke). While I'm still trying to verify that, I wondered, how could ...
2
votes
0answers
94 views

nmap -sV giving inconsistent results

I am scanning two networks (of which one I know very well and the other is managed by someone else and information is sparse). The aim is to check compliance (presence of an AV listener on the ...
2
votes
1answer
2k views

Why is “nc -l xxxx” not opening a port?

I'm trying to get netcat to listen on port 4444, but it doesn't seem to be working. I am checking to see if the port is open using nmap, but it doesn't pick it up and I can't figure out why. I have ...
2
votes
2answers
667 views

Port Scan: What is “netvenuechat”?

I was doing a quick port scan at work (Nmap 6, OS X 10.6.8), and I noticed that nearly all of the computers around me were running a service called "netvenuechat" on Port 1023. Although I've searched ...
0
votes
1answer
270 views

Pattern matching gnmap fields with SED

I am testing the regex needed for creating field extraction with Splunk for nmap and think I might be close... Example full line: Host: 10.0.0.1 (host) Ports: 21/open|filtered/tcp//ftp///, ...
4
votes
1answer
202 views

Why doesn't OS scan work against your own machine?

When scanning with nmap using the -O or -A flag, nmap tries to determine the OS of the target machine. Putting the question of why you would want to scan your own machine for OS aside, running OS ...
0
votes
2answers
224 views

Nmap -oG output

I've read about the -oG and tried it out, but it seems to not to working for me... SO basically I'm trying to scan for a port range, lets say for example 2.8.0.0 – 2.15.255.255 and for a list of for ...
0
votes
1answer
3k views

What is hosts2-ns

I just did a portscan on my parents router from the outside with nmap. (outside means I ssh'ed to my server and nmap'ed back to the routers external ip from that server) ~ $ sudo nmap -Pn ...
0
votes
0answers
858 views

How to close all unused ports

Whenever i do nmap on my system it shows most of the ports open.How to make only default ports open.I am using Windows Vista with Service Pack 2
0
votes
1answer
310 views

Can I run a tool like Nmap from a remote machine to pentest on my local Network?

Can I set up a backtrack system at home to connect to and remotely use tools like nmap on whatever network I'm in locally?
0
votes
2answers
607 views

Use Nmap to send arbitrary data from spoofed address/port

For testing the error and timeout handling of a custom SIP stack, it is sometimes useful to send UDP packets from multiple source addresses (even ones that are assigned to other hosts) to the host ...