Questions tagged [nmap]

Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.

Filter by
Sorted by
Tagged with
0
votes
1answer
12 views

How long does a nmap syn scan with the timing template set to -T1 take and is there a way to improve it's speed?

I'm entirely new / excited to learn about computers, linux and most recently port scanning . After reading about nmap in a book, I began to read the manual & website of nmap, and play around with ...
0
votes
0answers
26 views

external scan vs internal scan

nmap external (public network) scan for a specific target shows: PORT STATE SERVICE REASON 21/tcp open tcpwrapped syn-ack ttl 53 nmap internal scan (private network same IP as above ...
2
votes
1answer
53 views

Zenmap only shows the router

Zenmap (GUI of nmap) is only showing the router and not showing any other device on the network, even that i am certain that there are other devices that is the code i entered nmap -T4 -F 192.168.1.1/...
0
votes
0answers
11 views

local ports showing as “filtered” with nmap

I'm using a Ubuntu box. When I run nmap commands on the localhost address, some ports are showing up as filtered. Does this mean my firewall or something is actually blocking traffic to those ports ...
1
vote
1answer
41 views

Why does nmap think my computer has two IP addresses?

Nmap seems to think my computer has two IP addresses. When I run ipconfig, I get Connection-specific DNS Suffix . : home Link-local IPv6 Address . . . . . : fe80::****:****:****:****%12 IPv4 ...
0
votes
1answer
26 views

How to find open ports using netstat?

When I do a netstat -tuln, I get the following output Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:25 0.0.0.0:* ...
0
votes
1answer
260 views

Nmap scan is not showing all devices in my network

I have an Android device that runs Android9 and also another Android device that runs Android6 on it. I shared Android9's internet to Android6 through a wifi connection. Then I shared the Android6's ...
0
votes
0answers
17 views

nmap hostname detection very inconsistent

I've noticed that the hostname detection of nmap (Version 7.80) appears to be very inconsistent. For example scanning just the single host yields: # nmap -sn 10.128.1.100 Starting Nmap 7.80 ( https:/...
0
votes
0answers
22 views

Open service port out of Docker

In installed some docker application on my virtual server, and I never modified the iptables policies. When I run a full nmap to the virtual server I obtain, Host is up (0.044s latency). Not shown: ...
0
votes
0answers
80 views

Vulnerable Machine unable to get from DHCP server (host-only network setting)

I am setting up 2 virtual machine in virtualbox 1 kali linux and 1 holynix version1 which the network settings are configured to host -only network. I boot up and managed to get ip address for kali ...
0
votes
1answer
140 views

How to close a lot of open ports on home laptop

I scanned my laptop for open ports. Nmap found about 1000+ open ports with unknown services. I tried to create rules in the Windows firewall that closed these ports, but this did not help. Also I used ...
0
votes
0answers
44 views

ncat server with self-signed certificate accepts connections from ncat client without cetificate

When starting a ncat server with self-signed certificate i was still able to connect to the server as a ncat client without using the certificate. The command to start the server: ncat --listen --ssl ...
0
votes
1answer
603 views

How to scan for live hosts: Nmap shows all IPs only when run as root when only 4 IPs are online and incomplete results when run as “--unprivileged.”

I have an issue with Nmap. I have Kali on my vm installed. I want to scan the network for live hosts. But when I’m logged as root try nmap -sP 192.168.0.* Nmap reports that every IP in the subnet 192....
1
vote
1answer
69 views

how to nmap to show output text file has Discovered word and ip address and port for opened in window like in cmd?

option -oG not suitable for Excel to extract value in window because all ports in on line and not allowed to use bash i automate with batch file, but output not have Discovered starting word and ...
0
votes
0answers
359 views

Masscan doesn't support UDP?

It seems that masscan forces the -sS option no matter what you specify as an argument (at least from my experience). Check out this simple example: # masscan 1.1.1.1 --ports U:161,U:1024-1100 ...
0
votes
0answers
282 views

nmap on virtualbox gives back strange result

I have a Kali Linux guest inside a virtualbox network. The network is set as "NAT Network" with 192.168.1.0/24 as CIDR. The DHCP is disabled and default gateway (using the command "ip route") is 192....
1
vote
0answers
108 views

How to open telnet/ssh to Dlink DSL-225 router?

have D-link DSL 225 router that locate at 192.168.1.1 , with nmap I get PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 23/tcp open telnet 80/tcp open http 631/tcp open ipp when I ...
1
vote
1answer
34 views

How to easily diff two nmap scan outputs?

I ran a scan, plugged in a raspberry pi, then ran a scan again. Is there a utility or option within nmap that can allow me to easily diff the two scan outputs to find the IP address of my raspberry ...
0
votes
1answer
21 views

nmap deleting user path

It's not much of a question that a warning, but still i was wondering if someone faced this issue. I downloaded and installed the latest stable version of nmap (7.70) on my windows dev machine (i ...
1
vote
1answer
249 views

What are nmap's default timing values?

I often use nmap to scan a network, and at times need to play with the scan timing. Unfortunately, my timing experiments have been mostly fruitless, probably because I'm using values that are ...
1
vote
1answer
60 views

Network distruption when scanning with amass or nmap

When I'm scanning with amass with amass enum -active -brute -d {domain} the average queries performed are 151/sec and my connection gets disrupted at the point that it's not usable on any device ...
0
votes
1answer
148 views

Why is Nmap traceroute so fast?

Using Nmap's traceroute option shows only one hop and is extremely fast. I understand it works differently than traceroute in that it tries to guess the right TTL instead of beginning with 1. But ...
0
votes
0answers
165 views

Nmap not returning meaningful output

So for a security course homework we need to work with nmap. So far no problem. It basically just involves mapping a network that has been setup for us, scanning some ports, do some OS and service ...
0
votes
1answer
46 views

How to find ports marked as filtered by nmap

I have a host where if the command: nmap <host ip> is run, then get response: All 1000 scanned ports on <host ip> are closed (958) or filtered (42) So I want to find out which ports ...
0
votes
1answer
250 views

BSOD DRIVER_IRQL_NOT_LESS_OR_EQUAL during install of nmap-7.70-setup.exe on Windows 10

Downloaded nmap-7.70-setup.exe and tried to install but got BSOD DRIVER_IRQL_NOT_LESS_OR_EQUAL as seen below on Windows 10. What failed: jnprns.sys.
-2
votes
1answer
39 views

Is really NMAP uses ping packets to consider Host discovery?

I run this command nmap -sn 192.168.0.2 for only Host discovery. And then I started wireshark to see what will going to happen. I thought It would send ICMP echo req, but the results was very ...
1
vote
0answers
38 views

Fedora doesn't see devices attached via Ethernet switch

I'm trying to figure out how networking is build and have made a mini-network for practicing. The structure is following: What I want to do: Enable Ethernet connection between from main machine to ...
0
votes
0answers
7k views

Couldn't open a raw socket. Error: Permission denied (13) (nmap) [duplicate]

I'm using nmap in windows Subsystem for Linux. Why isn't nmap scanning anything? I'm using the link scanme.nmap.org to scan. I was testing nmap to see if it works, but it didn't even initialize. It ...
0
votes
1answer
44 views

NMap Result -A reference meaning

I ran nmap command for ssl enum cipher and got the output something like this (Could not copy paste due to intra network restrictions ) TLS1.0 TLS----SHA256 -A --- Cipher Prefernce -...
0
votes
0answers
55 views

How detect a ip of LAN camera ET-C142R

I buy a LAN Camera CCD Vídeo Camera model ET-C142R and i can't connect to it. I try set my computer ip to 192.168.0.1 netmask 16 and use nmap 192.168.0.0/16 but any hosts are up. Someone knows what ...
0
votes
1answer
637 views

Nmap really slow to scan inside docker container

If I run the following command bare-metal on my machine it takes a few mere seconds to run: nmap -v -n -p- <ip of other debian box> However if I run the extact same command inside docker it ...
1
vote
1answer
152 views

Nmap not working when implemented in crontab

I am trying to scan the network every day at a particular time(below example at 12:18) by using cronjobs and then output the IPs in a file. The command works perfectly but does not work if implemented ...
0
votes
0answers
97 views

My Raspberry Pi can’t detect or connect to open ports made by Netcat with my Debian virtual machine

I want to establish a connection over a network protocol like TCP/UDP using Netcat with my Debian virtual machine (using VirtualBox) as the host while my Raspberry Pi connects to the virtual machine. ...
0
votes
1answer
421 views

specifying more than one character on nmap --ip-options

specifying more than one character on nmap --ip-options Hi, I'v been on https://seclists.org/nmap-dev/2006/q3/52 a short reference manuel on --ip-options nmap option I am trying to put more than one ...
1
vote
1answer
1k views

I was scanning my local network for ports and found 5001 tcp/commplex-link. What is it?

Apparently my home router is listening on port 5001: Nmap scan report for 192.168.1.1 (192.168.1.1) Host is up (0.018s latency). Not shown: 997 closed ports PORT STATE SERVICE 80/tcp open ...
0
votes
0answers
421 views

strange error “(22 - 'Invalid argument')” when used with IPv4

I have "(22 - 'Invalid argument')" using nmap. I'V google'd and got https://seclists.org/nmap-dev/ but on that is it talks about IPv6 while I got this error using IPv4 in no place IPv4 is mensionned, ...
0
votes
0answers
1k views

how to detect RDP on uncommon ports with nmap?

I want to scan an IP range and check if any IPs in that scope have RDP enabled on other ports than 3389. I've tried this to confirm that the server has RDP: nmap --script rdp-enum-encryption -p ...
0
votes
2answers
147 views

nmap + how to detected all machines IP's with range for example 10.64.*.*

How to verify the range of all machines with nmap within IP class 10.64.*.* For example we tried nmap -sn 10.64.*.0/24 | grep redhat in order to capture all machines with redhat name that have ...
0
votes
1answer
33 views

Scan network settings from inside (pretend to be outside)

Is this possible? With nmap or similar tools? Basically I've setup NAT and security policies on my private network. Now I need to test them. Ideally I want to test them from my PC (that is on the ...
1
vote
0answers
74 views

How to specify a range for source ports for Nmap

It seems source port option "-g" does not support a range of ports, but destination port "-p" does. Has anyone came across a way to scan a fixed destination port using a range of source ports? This ...
1
vote
1answer
143 views

Which Application is listening on particular port

I tried to scan a particular IP in my network with the following command: nmap -sV --script=banner X.X.X.X and the result was : 25/tcp open tcpwrapped 80/tcp open tcpwrapped 443/tcp open ...
0
votes
1answer
2k views

How do I scan for hosts on a vpn using Zenmap on Windows?

I have successfully connected to a vpn from my Windows laptop and I want to see what hosts are up in the workgroup named "Boston". Currently the workgroup's DNS is not configured to list most of the ...
0
votes
1answer
8k views

Windows equivalent to nmap

This answer suggests netstat as an equivalent to nmap and also states that nmap for windows does not work. But I use nmap for an specific purpose and that is to see if a port of a network is open or ...
0
votes
2answers
4k views

How Nmap detect MAC address?

Here I find an interesting phenomenon, that I get different MAC address using different Nmap options. With my Kali OS, I type nmap -sS 192.168.1.4 to start a "half-open" scan. Starting Nmap 7.70(...
0
votes
0answers
277 views

Automatization of port scan proccess

I have a task in my company, that I need to scan all open ports from my external range of IP's and I need to create something to do this task every week or month and update the results with the new IP'...
0
votes
1answer
5k views

Too many fingerprints match this host to give specific OS details

Im using Armitage on Kali Linux 2. (Virtual box) In Armitage Im using "Quick scan (OS detect)" option. This is output log: [*] Nmap: Nmap scan report for 192.168.1.255 [*] Nmap: Host is up (0.0089s ...
-4
votes
1answer
133 views

How do I test uTP ports against DPI filtering?

How exactly does one test an uTP port to see if it's firewalled? I can't seem to find any documentation on how uTP is supposed to work, and nmap doesn't seem to have an uTP option.
5
votes
1answer
11k views

Error Nmap: 'dnet: Failed to open device wifi0' on Ubuntu (W10 bash)

I have an issue when using nmap. When i want to execute any command, nmap anwsers me : Nmap: 'dnet: Failed to open device wifi0' I am working on Ubuntu with the W10 bash subsystem. I red here ...
-1
votes
1answer
40 views

Can't open a port on Cent OS 7

I'm getting this error in my app: Call From master/192.168.X.X to localhost:11111 failed on connection exception: java.net.ConnectException: Connection refused And indeed ssh fails: [user@master ...
0
votes
2answers
150 views

Kali Linux 2.0 Nmap Tools

I'm learning to use Kali Linux to scan for online networks using nmap commands. The basic command here is nmap -sS /24 . I have a question about this nmap commands: In my house, i have 2 routers +...

1
2 3 4 5