Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

learn more… | top users | synonyms

4
votes
1answer
3k views

Why is “nc -l xxxx” not opening a port?

I'm trying to get netcat to listen on port 4444, but it doesn't seem to be working. I am checking to see if the port is open using nmap, but it doesn't pick it up and I can't figure out why. I have ...
0
votes
0answers
19 views

Nmap shows 554 and 7070 open on EVERY machine even when they are closed/filtered

Every single machine I scan shows port 7070 and port 554 as open regardless if the ports are closed/filtered. It will still show those two ports as open even if the target is offline (and the scan is ...
0
votes
0answers
7 views

NMAP service probe or normal port scan

Apologies - I am very new to these things.I read that nmap-service-probes will display the service that the port is using while nmap -sS will send a stealth SYN which is also capable of ...
1
vote
1answer
14 views

nmap scan with netbios/bonjour name

Is there any fancy way in Nmap to scan hosts plus getting the netbios/bonjour name as Fing app does? I've been looking at the -A argument, it's fine but it does a lot of another scripting stuff and ...
0
votes
3answers
26 views

Nmap- what are the top 100 ports scanned

I am new to nmap and i read that you can limit the output of nmap to the top 100 ports by using the command -F such as: nmap - F <IP> My question is what are the top 100 ports. I have been ...
1
vote
1answer
217 views

Nmap doesn't perform the script supplied as an argument

I'm running Kali Linux and I'm trying to run a nmap script against a host in the lab. The command I'm entering and the output is: root@kali:/usr/share/nmap/scripts# nmap --script dns-fuzz ...
0
votes
1answer
17 views

zenmap/nmap vs SoftPerfect Network Scanner

Do you use both or either or neither? Which one do you like or prefer? I like the double reverse lookup feature on SoftPerfect Network Scanner. Is similar feature also available on nmap? If so, what ...
0
votes
1answer
29 views

Using nmap responsibly towards learning and understanding the restrictions to safeguard myself?

I hope this thread doesn't get yanked to fast and if you have any negative feedback for me in asking this question please take it easy on me as I'm just a beginner trying to learn more in the most ...
0
votes
1answer
30 views

Nmap OS detection outputs fingerprints only

I've tried running nmap several times for OS detection, however I never get sucess. It would output "Too many fingerprints match this host to give specific OS details", or for example, Nmap scan ...
0
votes
0answers
36 views

nmap recognizes android device not in a scan area of more than 3 ips

this page was recommended to me by stackoverflow therefore I ask my question again here. I have performed some nmap scans, yet I have found out, that the scan over a larger area provides more ...
2
votes
1answer
106 views

nmap -sV giving inconsistent results

I am scanning two networks (of which one I know very well and the other is managed by someone else and information is sparse). The aim is to check compliance (presence of an AV listener on the ...
2
votes
1answer
5k views

nmap: easily Ping-Scan all addresses in my subnet

Is there an nmap line that will auto-detect my current IP address and subnet mask, and run a ping-scan on all? For example: #> nmap -sP 0.0.0.0 Instead of manually: #> nmap -sP ...
0
votes
0answers
18 views

NMAP from windows 7 - nothing found?

Attempting to use nmap (via 'zenmap') on Win7 pro. It's telling me that no hosts are found even though I'm fairly certain all is well. What I've tried: the command line (just to be sure) - same ...
0
votes
1answer
36 views

How to get nmap to show ftp banner / welcome message?

What are the commands to get nmap to show ftp banner responses?
0
votes
0answers
11 views

nmap buffering output, any way to get faster output?

I'm running nmap against the 256 IPs on my local network. $ nmap -sS -p 80,8080,443,8888 192.168.1.1/24 | less I'd like interactive output piped to less, that I can view as the scan progresses. ...
1
vote
1answer
26 views

what's hops unity in network context

I have scanned a remote server using nmap : And i get the following OUTPUT : Network Distance: 22 hops What's hops unity? And , is there a relationship among the others unities of distance ...
0
votes
1answer
28 views

ADSL device providing No NAT DMZ alongside NAT (IPv4)

I have an ADSL modem/router/switch which performs NAT. It does this even for the one host it can be configured to provide a DMZ. I want to be able to perform Nmap scans from a specific host and there ...
0
votes
1answer
61 views

After I switch default SSH ports, why does NMAP display port service as “down”

Running Ubuntu 13.04, I edit sshd_config to change Port 22 to Port 2022 When I reload my sshd service and nmap the server from my local machine, I get this: PORT STATE SERVICE 2022/tcp open ...
1
vote
2answers
123 views

Why would ping succeed but nmap fail?

Why does Nmap report "Host seems down" when a simple ping succeeds? me@computer:~$ ping 123.45.67.89 PING 123.45.67.89 (123.45.67.89) 56(84) bytes of data. 64 bytes from 123.45.67.89: icmp_req=1 ...
1
vote
1answer
1k views

Kali Linux Can't Find Any Computer On Network

I'm trying nmap and arp. When i'm execute "arp -a" only shows myhome.mynet ([my_ip]) at [MAC_ADDRESS] [ether] on wlan0 And when i'm trying to nmap [my_ip] it shows Starting Nmap 6.40 ( ...
1
vote
1answer
39 views

How does Nmap decide which DNS servers to use?

I had a problem using Nmap which turned out to be down the list of DNS servers Nmap was using for reverse DNS. There were 2 correct DNS servers and two strange ones. The problem was solved/worked ...
2
votes
2answers
355 views

Why is Nmap slow on my Windows 8.1 laptop?

Nmap is so slow as to be almost unusable on my Windows 8.1 laptop. I'm using Nmap 6.40 and it's taking more than a minute to run a simple check that runs in a fraction of a second on other computers ...
0
votes
2answers
182 views

How can I find private IP address of a device?

I 'm trying to detect IP address of a Wireless Access Point device, connected via Ethernet on my router. Router's configuration page shows status of the Ethernet port is up, but no device connected. ...
0
votes
2answers
230 views

different result while nmap scan a subnet

while running: nmap -n -PN -sT -T4 -p 445,139 10.0.40.0/24 i get: Interesting ports on 10.0.40.6: PORT STATE SERVICE 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds if I ...
1
vote
1answer
40 views

Linux distribution detection with Nmap

When I run Nmap with OS detection it delivers the kernel version of the Linux host instead of the name of the Distribution. Nessus does Os detection based on banners ...
0
votes
0answers
47 views

NMAP scan on a device on an external 3G network

I am getting my hands dirty my learning nmap these days. After already learning the basics, now I am trying to find the OS and other details of a device which is on an external 3g network (it is a ...
1
vote
3answers
112 views

Quick way to scan for opened ports on local network according to a list

How can I quickly find out whether port 80 is open/listening on a server via a bash script? Normally on all workstations the daemon is running, but sometimes it fails. I use the following command to ...
0
votes
1answer
102 views

How to get device name from scan like nmap on Linux

I know that I can use a tool like NMAP or arp-scan on Linux to identify the IP and MAC addresses of all devices on my local network. I also know that arp-scan will do a MAC address lookup to get the ...
0
votes
0answers
71 views

Nmap doesn't use the script supplied in argument

I'm running under Kali Linux and I'm trying to run a script against a host in the lab. The command I'm entering and the output is: root@kali-vm:~# nmap --script smb-enum-users.nse -p445 192.168.1.1 ...
0
votes
1answer
85 views

Reconciling nmap, fping output

I am trying to understand the local network I am on. Public IP is 23.23.23.23, say. Output of some common commands: charles@ely:~$ ip addr show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc ...
8
votes
4answers
12k views

Find computer names on a private network (with nmap?)

On a LAN, I want to find out the names of all the connected computers using a cross-platform program, preferably nmap. I know I can do nmap -sn xxx.xxx.xxx.xxx/24 (where xxx.xxx.xxx.xxx is a local ...
2
votes
1answer
63 views

How to list hosts on the current network without knowing the subnet in advance?

The following 2 questions have been useful for finding hosts on a target network: - http://superuser.com/q/311019/45927 - http://security.stackexchange.com/q/36198/35859 However, answers in both ...
0
votes
0answers
23 views

Find OS by interpreting TCP/IP fingerprints when using nmap [duplicate]

When I ran the command: nmap -O ip_address to identify the OS, I got the following result: OS:SCAN(V=5.05BETA1%D=8/23%OT=22%CT=1%CU=42341%PV=N%DS=0%DC=L%G=Y%TM=4A91CB ...
1
vote
1answer
1k views

Setting up the metasploitable in virtualbox

I'm supposed to try and use kali to do exploits on metasploitable, but I'll burn that bridge when I get there. My question right now is: How do I set up a host only network on virtualbox? I heard ...
0
votes
1answer
141 views

Ping via nmap all possible private IPv4 addresses

Is there any way to ping via nmap (using one command) all the possible private IPv4 addresses from: 192.168.0.0 - 192.168.255.255. The number of all combinations is 65536.
0
votes
1answer
632 views

nmap installation issue

vanilla centos with latest updates, installed gcc, and after ./configure:.... Configuration complete. Type make (or gmake on some *BSD machines) to compile. [root@winxp nmap-5.51]# make ...
1
vote
0answers
76 views

Why will nmap not update for me?

I'm currently running nmap 6.25 on Mac OSX 10.8.5. I tried to download the pre-compiled DMG bundle for 6.40 and install it. After installation it still shows me I have 6.25: hehe~ ➙ nmap -V Nmap ...
3
votes
3answers
4k views

nmap says 0 hosts up even though I can ping

I'm running Metasploit from Win 7 x64, and I've set up my Metasploitable 2 virtual machine on VMware Player. I can ping Metasploitable's IP address from the Metasploit console, however if I use nmap ...
0
votes
0answers
58 views

Nmap spoofing function

I try to use nmap to spoof the IP address inside my network (LAN) but I'm having no luck. I used nmap --iflist (my actual IP address on the network is: 129.110.11.58) and went for eth0 for the -e ...
0
votes
1answer
245 views

what can filter a port on Fedora 19 besides router, firewall and selinux?

I am trying to use seafile which seems very nice. Unfortunately I have an issue that I fail to explain. From my two fedora 19 machines, nmap says port 12001 is filtered on the distant (say private) ...
4
votes
1answer
312 views

How to easily determine, which outbound ports aren't blocked by firewall

I'm behind fairly restrictive firewall regarding ports, that can be used for connecting outside. I'm also running service on my remote box, and I want to connect to it. Problem is, that I'm unable to ...
0
votes
2answers
94 views

Is it possible to find which ip is going to a website? [closed]

We have someone that keeps trying to connect to our email host and after a few attempts of trying to log in (incorrectly) we are then blocked. We then have to call and unblock. Less then having ...
2
votes
1answer
3k views

How does nmap calculate the difficulty of TCP sequence prediction?

I am learning how nmap operates by testing it with another workstation in my network. When I entered nmap -v -A -sS 192.xxx.xxx.xxx Part of the output produced the line below. TCP Sequence ...
1
vote
1answer
302 views

Changed port service from http to http-proxy

I have Apache running on 192.168.0.201 and listening to Port 80. namp shows me that Port 80/TCP is open and service is http. [root@desktop ~]# nmap -p 80 -sT 192.168.0.201 Starting Nmap 5.51 ( ...
1
vote
2answers
893 views

In Windows 7, how do I find the IP of a device (Raspberry Pi) attached via Ethernet?

I want to determine the IP of my Raspberry Pi which is attached to my PC via Ethernet and has a dynamic IP.
1
vote
0answers
371 views

How to close suspicious port 999 garcon, is it malware?

On Mac OSX, I ran the command nmap localhost and I found I have this suspicious open port: 999/tcp open garcon Then I tried to see if there is an associated process, but nothing shows up with ...
0
votes
1answer
32 views

Nmap not returning hostnames when connected to 2 networks

I've the following configuration : 1 computeur connected a 1 network over Wifi and another network over ethernet. These 2 network are totally independant. I'm using nmap (6.00) to check which ...
1
vote
1answer
96 views

Penetration testing with WMAP, only for my domain, not the others with the same IP?

My domain got massively hacked, so I'm doing some penetration testing with it using WMAP and NMAP etc. However, I believe it's on shared hosting, so running tests on 182.34.xx.xxx (the IP address for ...
0
votes
1answer
1k views

How can I use a bash script to run nmap and capture both IP and hostname?

I want to scan my network; and return an output like this: Network Scan for 192.168.0.* 192.168.0.1 computer1 192.168.0.2 computer2 192.168.0.3 computer5 echo Network Scan nmap -sP -n ...
3
votes
1answer
5k views

How to find which ports are blocked?

I have root on two machines A and B and I would like to know which ports can't be accessed on B from A. Is there some way to run a command line application on B that listens on all ports and then run ...