Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

learn more… | top users | synonyms

0
votes
1answer
2k views

Nmap won't run any scripts

When I try to run a Nmap script on Kali Linux I get the following: root@known:~# nmap --script smb-check-vulns.nse 192.168.1.111 Starting Nmap 7.00 ( https://nmap.org ) at 2015-12-04 03:45 EST NSE: ...
0
votes
1answer
25 views

Nmap scan on my LAN is blocked by my host firewall (Linux)

I recently added some rules to GUFW to make sure only my (personal) VPN connection is allowed to get out, x.x.x.x being my ip, y.y.y.y being my VPN's IP I connect to. To - Action - From y.y.y.y ...
5
votes
2answers
8k views

What is the recommended way to get nmap on OSX?

Can I just use apt-get, or should I use some Mac tool?
1
vote
1answer
28 views

What are the default nmap options?

Which options are used by default, when the user fires # nmap target without any explicit option? I am going to write the defaults of the three options I consider the most important. It would be ...
0
votes
2answers
112 views

What is the difference between nmap and netstat?

I am trying to learn a little about networking and I was hoping to get some help. Does anyone know the difference between nmap and netstat? I kind of know how to use them and how to check ports but ...
0
votes
0answers
68 views

nmap on metasploitable outputs all ports filtered

I wanted to get started with metaploit on kali. I have set up Kali Linux in VirtualBox and everything works fine. Then I set up Metasploitable 2 on vmwareplayer. Now when I nmap metasploitable it ...
1
vote
2answers
34 views

With nmap is it possible to scan a private network from outside?

Is it possible for a hacker to scan my computer using this command: nmap 10.0.0.0/8 even if he is not connected to my network ? (and if my private IP is 10.0.2.24 for instance) Thanks
-2
votes
2answers
1k views

What is another use for port 8080/8443 other than a proxy?

I see alot of servers with port 8080 open. Most times I am able to connect to the proxy server, but the majority are unable to make requests outside the network, or internally. What is the purpose of ...
0
votes
1answer
42 views

Close a TCP connection using nmap

I am trying to close connections in command line. For instance, I am trying to close my SSH connection with this Nmap command: $ sudo nmap -p 22 --scanflags RST <mySSHServerPublicIP> $ sudo ...
3
votes
0answers
3k views

How to close suspicious port 999 garcon, is it malware?

On Mac OSX, I ran the command nmap localhost and I found I have this suspicious open port: 999/tcp open garcon Then I tried to see if there is an associated process, but nothing shows up with ...
0
votes
0answers
14 views

Identifying device type remotely

I am writing an IP scanner in C#... I'm not looking for coding help, but rather the how do I determine the device type. Using WMI and remote registry I am able to get all information I want from ...
1
vote
1answer
2k views

Server: Microsoft-HTTPAPI/2.0 running on port 10234 on my Windows 7 pc?

I've recently set up a home server and spent some time working on the security. One of the tools I've been using nmap which I pointed at my Windows 7 desktop. It showed an unknown service on port ...
0
votes
2answers
36 views

random open ports on nmap scan

My machine has the IP address 192.168.1.50 . When i do the following nmap scan nmap -p- -sT -Pn 192.168.1.50 from the same machine, i get at each scan some random open ports. And these random open ...
0
votes
1answer
23 views

NMap save results to separate files

I was wondering if there was any way to specify a range of IP addresses and save the scan results for each to a sepperate file in the same folder. So scan 1.1.1.1, 1.1.1.2, 1.1.1.3 and they all save ...
0
votes
2answers
1k views

How to get device name from scan like nmap on Linux

I know that I can use a tool like NMAP or arp-scan on Linux to identify the IP and MAC addresses of all devices on my local network. I also know that arp-scan will do a MAC address lookup to get the ...
0
votes
1answer
54 views

how to discover up hosts in a local network with nmap

I know that this question was asked a lot, but all the answers given are with the ping scan of nmap nmap -sP 192.168.1.1/24. The problem with this scan is that it doesn't detect hosts that doesn't ...
0
votes
1answer
45 views

Port forwarding error

I am very new to networks, and I am trying to access a computer which has no public ip from outside its private network. The layout of the network looks like this: PC <----> ...
2
votes
1answer
917 views

Nmap shows 554 and 7070 open on EVERY machine even when they are closed/filtered

Every single machine I scan shows port 7070 and port 554 as open regardless if the ports are closed/filtered. It will still show those two ports as open even if the target is offline (and the scan is ...
0
votes
0answers
2 views

Can I tell zenmap to apply a command to all known hosts?

In zenmap (an nmap gui), you can apply various scans, and it remembers the results, keeping a list of hosts you have successfully scanned. Can you tell it to apply a command against all known hosts (...
1
vote
1answer
164 views

NMAP Always says host is down (when using -Pn it says ports filtered)

I am running Kali 2.0 (Kali sana) and I have problem with NMAP, it everytime says that host is down when i scan it (even myself with firewall off)... When I try online nmap (https://pentest-tools.com/...
0
votes
0answers
16 views

Can't get nmap info from Brainpan2

I'm trying to setup an environment in VirtualBox for exploiting Brainpan2 (from Vulnhub). I created 2 VMs (Brainpan2 and Kali) but when I try to perform an nmap -A scan on the other 3 IP addresses on ...
1
vote
3answers
441 views

different behavior: “sudo nmap” vs just “nmap”?

I'm attempting to do a simple port scan with nmap: $ nmap 192.168.56.101 Starting Nmap 6.47 ( http://nmap.org ) at 2015-03-10 19:30 IST Nmap scan report for 192.168.56.101 Host is up (0.0048s ...
1
vote
0answers
41 views

Why would “nmap -p -” miss an open port?

I ran nmap -p - against a system that I knew to have at least one listening service. The only output that was returned was for port 113 (ident), which showed "closed". I ran nmap again, but this time ...
1
vote
1answer
298 views

How we can open the filtered port again?

I had a root access from a Server over SSH on 2200 port but, recently I can not connect to it ,so after checking via nmap turns out the port is filtered by admin or someone . Host is up (0.011s ...
0
votes
1answer
837 views

Detect if iPhone is active on network

I want to detect if my iPhone connects / is connected to my LAN, so I can turn on the lights. This is pretty close to this question How to detect an iPhone connecting a network? I want to detect if ...
4
votes
3answers
10k views

What is the “park-agent” service used for?

I scanned my machine using Nmap and found an open port (5431) is used by the "park-agent" service. What is the "part-agent" service used for?
1
vote
2answers
144 views

Is a firewall blocking me from accessing VZW's website?

I am not able to get on Verizon Wireless's website http://www.verizonwireless.com/ from any computer on my LAN. Chrome and Firefox just return with a connection timed out. However, the name resolves ...
0
votes
1answer
230 views

Scanning a network and SSH each IP until I get in through SSH

Normally, I would SSH into that machine using: ssh user1@123.45.67.8 That server in my network is forced to use DHCP in the subnet (134.96.90.0). And everytime it shuts down, I have to go find the ...
0
votes
1answer
402 views

Installing nmap and keeping it undetectable

I have a administrative computer fully equipped with antivirus (avg,norton,malbytes. etc) that I want to install ncat(nmap) on and keep it as close to undetectable as possible. How would I do this?
0
votes
1answer
105 views

nmap -sn and -sL produce different results for the same host

When I scan the whole network it shows 3 hosts are up: pi@Pi /Z $ nmap -sn 192.168.0.0/24 Starting Nmap 6.00 ( http://nmap.org ) at 2015-09-09 00:48 EDT Nmap scan report for 192.168.0.100 Host is up ...
1
vote
2answers
963 views

Does a nmap scan against my own IP go past the firewall?

I'm trying to secure my computer against local network attacks for when I'm at university or a LAN party. Does running a nmap scan against my own IP go through the firewall or does it bypass the ...
0
votes
2answers
55 views

How to SSH to and connect back to original network?

Once I’ve connected to my Linux Machine(B) over the internet from my current PC(A), is there a way to run software on that machine(B) on the local one(A) so that it uses the original network. For ...
1
vote
2answers
2k views

Scanning my public IP address with Nmap finds TCP port 1720 open, is this a security concern?

When scanning my public ip address with Nmap I found out that I have open port on 1720/TCP. According Nmap service on it is H.323/Q.931. Researching uses of this port also brings up Microsoft ...
1
vote
1answer
69 views

With nmap and awk, displaying any http ports with the host's ip

I scanned around 50 hosts on a network with this command: nmap -sV -iL sweep_ips.txt -oG result.txt ex: ... Host: 192.168.x.x () Ports: 8000/open/tcp//http//Apache httpd 2.2.3 ((CentOS))/ ...
1
vote
2answers
769 views

What's the difference between -sS and -sT on nmap?

What's the difference between -sS and -sT on nmap? Both commands give the same output (besides filtered ports/closed ports).
2
votes
0answers
57 views

Scan using nmap on a different network

My system is connected to a router and that router is the part of LAN. How do I scan other systems that are a part of the LAN to which my router is connected ? My Router's DHCP allocates C-class ...
0
votes
0answers
19 views

Edit nmap database for os detection

I try to discover a network topology by using nmap. Part of the job is detect device type. I want to add my device information into the nmap database (which is not available before). Of course, I ...
1
vote
1answer
112 views

Detect RIPv1 via NMAP

Due to the recent increase of reflection attacks noted by Akamais security teams using original RIP(classful, depreciated) I'm interested to see if some of the CPE running within a network segment ...
0
votes
1answer
133 views

nmap: Scantype - not supported

When I run the following nmap command to test against my VM's: nmap --spoof-mac Cisco --data-length 24 -T paranoid -max-hostgroup 1 -max-parallelism 10 -PN -f -D 10.1.20.5,RND:5,ME -v -n -sS -sV-oA /...
1
vote
1answer
112 views

Why Armitage nmap results differs from msfconsole ones?

More specific in msf console why when I 'nmap -v -A 192.168.1.8' I get all the results I expect (OS detection windows 8.1 etc), while when I do the same from armitage I get unknown? I have the same ...
5
votes
3answers
10k views

nmap says 0 hosts up even though I can ping

I'm running Metasploit from Win 7 x64, and I've set up my Metasploitable 2 virtual machine on VMware Player. I can ping Metasploitable's IP address from the Metasploit console, however if I use nmap ...
0
votes
1answer
86 views

how to scan non-default SSH port

for example port SSH is 4020 nmap 192.168.1.1 -sV The result is : PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd where is SSH port ? I try command below to test ssh ssh ...
0
votes
1answer
55 views

Ping sweep LAN without specifying IP

I know I can ping sweep my LAN by doing something like nmap -sP 192.168.0.0/24 which works just fine. I was wondering if there was anyway nmap could figure out the range for the local subnet on it's ...
1
vote
1answer
147 views

Bash - Parsing XML output of nmap

I am trying to write a bash script that will take port id I retrieve from an nmap command, and then use those ports to send a file using netcat. So I got some basic knowledge using this link, How can ...
5
votes
2answers
354 views

Why doesn't OS scan work against your own machine?

When scanning with nmap using the -O or -A flag, nmap tries to determine the OS of the target machine. Putting the question of why you would want to scan your own machine for OS aside, running OS ...
1
vote
2answers
767 views

NMAP Root different from Under Privileged user

When I use as root nmap -sP -n hostaddress I get the mac address of the hostaddress device but when I change to a different user with less privileges I do not get the mac address as a return. ...
0
votes
1answer
128 views

Why does a NMAP scan give different results depending on whether it's run from inside or outside a LAN?

I am testing/setting up a Thomson TG585v7 Router/Firewall. Results when running nmap from a computer inside the LAN: $ sudo nmap -O 210.86.xxx.xxx Starting Nmap 6.40 ( http://nmap.org ) at 2015-02-...
1
vote
0answers
71 views

If nmap reports a port is open, does that ALSO mean a service is listening on the port?

I have a Thompson TG585v7 router/firewall whose firewall is configured to FORWARD several ports to a computer X54 within the LAN. These ports are in the range 1024 through to 2500 That X54 ...
0
votes
2answers
2k views

How to reverse arp using nping for Windows

I would like to send a reverse ARP to resolve an IP address given a MAC address using nping for Windows. The documentation is not clear on how this should work and I'm unable to find any examples ...
0
votes
1answer
42 views

How to detect ips using nmap?

I am currently working on demonstrating Man in middle Attack foe which I am using my phone as a Victim and my PC running ubuntu 14.04LTS as attacker. I am using nmap to ping my phone to check if its ...