Questions tagged [nmap]
Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.
214
questions
0
votes
1answer
12 views
How long does a nmap syn scan with the timing template set to -T1 take and is there a way to improve it's speed?
I'm entirely new / excited to learn about computers, linux and most recently port scanning . After reading about nmap in a book, I began to read the manual & website of nmap, and play around with ...
0
votes
0answers
26 views
external scan vs internal scan
nmap external (public network) scan for a specific target shows:
PORT STATE SERVICE REASON
21/tcp open tcpwrapped syn-ack ttl 53
nmap internal scan (private network same IP as above ...
2
votes
1answer
53 views
Zenmap only shows the router
Zenmap (GUI of nmap) is only showing the router and not showing any other device on the network, even that i am certain that there are other devices that is the code i entered nmap -T4 -F 192.168.1.1/...
0
votes
0answers
11 views
local ports showing as “filtered” with nmap
I'm using a Ubuntu box.
When I run nmap commands on the localhost address, some ports are showing up as filtered. Does this mean my firewall or something is actually blocking traffic to those ports ...
1
vote
1answer
41 views
Why does nmap think my computer has two IP addresses?
Nmap seems to think my computer has two IP addresses.
When I run ipconfig, I get
Connection-specific DNS Suffix . : home
Link-local IPv6 Address . . . . . : fe80::****:****:****:****%12
IPv4 ...
0
votes
1answer
26 views
How to find open ports using netstat?
When I do a netstat -tuln, I get the following output
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 127.0.0.1:25 0.0.0.0:* ...
0
votes
1answer
260 views
Nmap scan is not showing all devices in my network
I have an Android device that runs Android9 and also another Android device that runs Android6 on it. I shared Android9's internet to Android6 through a wifi connection. Then I shared the Android6's ...
0
votes
0answers
17 views
nmap hostname detection very inconsistent
I've noticed that the hostname detection of nmap (Version 7.80) appears to be very inconsistent.
For example scanning just the single host yields:
# nmap -sn 10.128.1.100
Starting Nmap 7.80 ( https:/...
0
votes
0answers
22 views
Open service port out of Docker
In installed some docker application on my virtual server, and I never modified the iptables policies.
When I run a full nmap to the virtual server I obtain,
Host is up (0.044s latency).
Not shown: ...
0
votes
0answers
80 views
Vulnerable Machine unable to get from DHCP server (host-only network setting)
I am setting up 2 virtual machine in virtualbox 1 kali linux and 1 holynix version1 which the network settings are configured to host -only network.
I boot up and managed to get ip address for kali ...
0
votes
1answer
140 views
How to close a lot of open ports on home laptop
I scanned my laptop for open ports. Nmap found about 1000+ open ports with unknown services. I tried to create rules in the Windows firewall that closed these ports, but this did not help. Also I used ...
0
votes
0answers
44 views
ncat server with self-signed certificate accepts connections from ncat client without cetificate
When starting a ncat server with self-signed certificate i was still able to connect to the server as a ncat client without using the certificate. The command to start the server:
ncat --listen --ssl ...
0
votes
1answer
603 views
How to scan for live hosts: Nmap shows all IPs only when run as root when only 4 IPs are online and incomplete results when run as “--unprivileged.”
I have an issue with Nmap. I have Kali on my vm installed.
I want to scan the network for live hosts. But when I’m logged as root try nmap -sP 192.168.0.* Nmap reports that every IP in the subnet 192....
1
vote
1answer
69 views
how to nmap to show output text file has Discovered word and ip address and port for opened in window like in cmd?
option -oG not suitable for Excel to extract value in window because all ports in on line and not allowed to use bash
i automate with batch file, but output not have Discovered starting word and ...
0
votes
0answers
359 views
Masscan doesn't support UDP?
It seems that masscan forces the -sS option no matter what you specify as an argument (at least from my experience). Check out this simple example:
# masscan 1.1.1.1 --ports U:161,U:1024-1100
...
0
votes
0answers
282 views
nmap on virtualbox gives back strange result
I have a Kali Linux guest inside a virtualbox network.
The network is set as "NAT Network" with 192.168.1.0/24 as CIDR.
The DHCP is disabled and default gateway (using the command "ip route") is 192....
1
vote
0answers
108 views
How to open telnet/ssh to Dlink DSL-225 router?
have D-link DSL 225 router that locate at 192.168.1.1 , with nmap I get
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
23/tcp open telnet
80/tcp open http
631/tcp open ipp
when I ...
1
vote
1answer
34 views
How to easily diff two nmap scan outputs?
I ran a scan, plugged in a raspberry pi, then ran a scan again. Is there a utility or option within nmap that can allow me to easily diff the two scan outputs to find the IP address of my raspberry ...
0
votes
1answer
21 views
nmap deleting user path
It's not much of a question that a warning, but still i was wondering if someone faced this issue.
I downloaded and installed the latest stable version of nmap (7.70) on my windows dev machine (i ...
1
vote
1answer
249 views
What are nmap's default timing values?
I often use nmap to scan a network, and at times need to play with the scan timing. Unfortunately, my timing experiments have been mostly fruitless, probably because I'm using values that are ...
1
vote
1answer
60 views
Network distruption when scanning with amass or nmap
When I'm scanning with amass with amass enum -active -brute -d {domain} the average queries performed are 151/sec and my connection gets disrupted at the point that it's not usable on any device ...
0
votes
1answer
148 views
Why is Nmap traceroute so fast?
Using Nmap's traceroute option shows only one hop and is extremely fast. I understand it works differently than traceroute in that it tries to guess the right TTL instead of beginning with 1. But ...
0
votes
0answers
165 views
Nmap not returning meaningful output
So for a security course homework we need to work with nmap. So far no problem. It basically just involves mapping a network that has been setup for us, scanning some ports, do some OS and service ...
0
votes
1answer
46 views
How to find ports marked as filtered by nmap
I have a host where if the command:
nmap <host ip>
is run, then get response:
All 1000 scanned ports on <host ip> are closed (958) or filtered (42)
So I want to find out which ports ...
0
votes
1answer
250 views
BSOD DRIVER_IRQL_NOT_LESS_OR_EQUAL during install of nmap-7.70-setup.exe on Windows 10
Downloaded nmap-7.70-setup.exe and tried to install but got BSOD DRIVER_IRQL_NOT_LESS_OR_EQUAL as seen below on Windows 10. What failed: jnprns.sys.
-2
votes
1answer
39 views
Is really NMAP uses ping packets to consider Host discovery?
I run this command nmap -sn 192.168.0.2 for only Host discovery. And then I started wireshark to see what will going to happen.
I thought It would send ICMP echo req, but the results was very ...
1
vote
0answers
38 views
Fedora doesn't see devices attached via Ethernet switch
I'm trying to figure out how networking is build and have made a mini-network for practicing. The structure is following:
What I want to do:
Enable Ethernet connection between from main machine to ...
0
votes
0answers
7k views
Couldn't open a raw socket. Error: Permission denied (13) (nmap) [duplicate]
I'm using nmap in windows Subsystem for Linux. Why isn't nmap scanning anything? I'm using the link scanme.nmap.org to scan. I was testing nmap to see if it works, but it didn't even initialize. It ...
0
votes
1answer
44 views
NMap Result -A reference meaning
I ran nmap command for ssl enum cipher and got the output something like this
(Could not copy paste due to intra network restrictions )
TLS1.0 TLS----SHA256 -A
--- Cipher Prefernce -...
0
votes
0answers
55 views
How detect a ip of LAN camera ET-C142R
I buy a LAN Camera CCD Vídeo Camera model ET-C142R and i can't connect to it. I try set my computer ip to 192.168.0.1 netmask 16 and use nmap 192.168.0.0/16 but any hosts are up.
Someone knows what ...
0
votes
1answer
637 views
Nmap really slow to scan inside docker container
If I run the following command bare-metal on my machine it takes a few mere seconds to run:
nmap -v -n -p- <ip of other debian box>
However if I run the extact same command inside docker it ...
1
vote
1answer
152 views
Nmap not working when implemented in crontab
I am trying to scan the network every day at a particular time(below example at 12:18) by using cronjobs and then output the IPs in a file. The command works perfectly but does not work if implemented ...
0
votes
0answers
97 views
My Raspberry Pi can’t detect or connect to open ports made by Netcat with my Debian virtual machine
I want to establish a connection over a network protocol like TCP/UDP using Netcat with my Debian virtual machine (using VirtualBox) as the host while my Raspberry Pi connects to the virtual machine.
...
0
votes
1answer
421 views
specifying more than one character on nmap --ip-options
specifying more than one character on nmap --ip-options
Hi, I'v been on https://seclists.org/nmap-dev/2006/q3/52 a short reference manuel on --ip-options nmap option
I am trying to put more than one ...
1
vote
1answer
1k views
I was scanning my local network for ports and found 5001 tcp/commplex-link. What is it?
Apparently my home router is listening on port 5001:
Nmap scan report for 192.168.1.1 (192.168.1.1)
Host is up (0.018s latency).
Not shown: 997 closed ports
PORT STATE SERVICE
80/tcp open ...
0
votes
0answers
421 views
strange error “(22 - 'Invalid argument')” when used with IPv4
I have "(22 - 'Invalid argument')" using nmap.
I'V google'd and got https://seclists.org/nmap-dev/
but on that is it talks about IPv6 while I got this error using
IPv4 in no place IPv4 is mensionned, ...
0
votes
0answers
1k views
how to detect RDP on uncommon ports with nmap?
I want to scan an IP range and check if any IPs in that scope have RDP enabled on other ports than 3389.
I've tried this to confirm that the server has RDP:
nmap --script rdp-enum-encryption -p ...
0
votes
2answers
147 views
nmap + how to detected all machines IP's with range for example 10.64.*.*
How to verify the range of all machines with nmap within IP class
10.64.*.*
For example we tried
nmap -sn 10.64.*.0/24 | grep redhat
in order to capture all machines with redhat name that have ...
0
votes
1answer
33 views
Scan network settings from inside (pretend to be outside)
Is this possible? With nmap or similar tools? Basically I've setup NAT and security policies on my private network. Now I need to test them. Ideally I want to test them from my PC (that is on the ...
1
vote
0answers
74 views
How to specify a range for source ports for Nmap
It seems source port option "-g" does not support a range of ports, but destination port "-p" does. Has anyone came across a way to scan a fixed destination port using a range of source ports?
This ...
1
vote
1answer
143 views
Which Application is listening on particular port
I tried to scan a particular IP in my network with the following command:
nmap -sV --script=banner X.X.X.X
and the result was :
25/tcp open tcpwrapped
80/tcp open tcpwrapped
443/tcp open ...
0
votes
1answer
2k views
How do I scan for hosts on a vpn using Zenmap on Windows?
I have successfully connected to a vpn from my Windows laptop and I want to see what hosts are up in the workgroup named "Boston". Currently the workgroup's DNS is not configured to list most of the ...
0
votes
1answer
8k views
Windows equivalent to nmap
This answer suggests netstat as an equivalent to nmap and also states that nmap for windows does not work.
But I use nmap for an specific purpose and that is to see if a port of a network is open or ...
0
votes
2answers
4k views
How Nmap detect MAC address?
Here I find an interesting phenomenon, that I get different MAC address using different Nmap options.
With my Kali OS, I type nmap -sS 192.168.1.4 to start a "half-open" scan.
Starting Nmap 7.70(...
0
votes
0answers
277 views
Automatization of port scan proccess
I have a task in my company, that I need to scan all open ports from my external range of IP's and I need to create something to do this task every week or month and update the results with the new IP'...
0
votes
1answer
5k views
Too many fingerprints match this host to give specific OS details
Im using Armitage on Kali Linux 2. (Virtual box) In Armitage Im using "Quick scan (OS detect)" option. This is output log:
[*] Nmap: Nmap scan report for 192.168.1.255
[*] Nmap: Host is up (0.0089s ...
-4
votes
1answer
133 views
How do I test uTP ports against DPI filtering?
How exactly does one test an uTP port to see if it's firewalled? I can't seem to find any documentation on how uTP is supposed to work, and nmap doesn't seem to have an uTP option.
5
votes
1answer
11k views
Error Nmap: 'dnet: Failed to open device wifi0' on Ubuntu (W10 bash)
I have an issue when using nmap.
When i want to execute any command, nmap anwsers me :
Nmap: 'dnet: Failed to open device wifi0'
I am working on Ubuntu with the W10 bash subsystem.
I red here ...
-1
votes
1answer
40 views
Can't open a port on Cent OS 7
I'm getting this error in my app:
Call From master/192.168.X.X to localhost:11111 failed on connection exception: java.net.ConnectException: Connection refused
And indeed ssh fails:
[user@master ...
0
votes
2answers
150 views
Kali Linux 2.0 Nmap Tools
I'm learning to use Kali Linux to scan for online networks using nmap commands. The basic command here is nmap -sS /24 .
I have a question about this nmap commands:
In my house, i have 2 routers
+...
