Questions tagged [nmap]
Nmap ("Network Mapper") is an open source tool for network exploration and security auditing.
238
questions
0
votes
0answers
4 views
AWS nmap fails from kali instance to windows instance
I've looked around a bit, and I'm stumped looking for insight
I have 3 instances running as EC2 in AWS: windows server 2016 (2x) and a kali linux instance, if I try to use nmap to touch my windows ...
0
votes
0answers
32 views
NMAP -sn giving ARP or IP results on same subnet from privileged user
Whilst studying for my ethical hacking exam, I am reviewing Nmap -sn and noted in Wireshark just arp responses. So after digging and asking other students, I now understand that an unprivileged user ...
0
votes
1answer
56 views
Nmap Spoofing NSOCK ERROR
I've recently tried out the following nmap command on my Kali Linux virtual machine with Nmap 7.91,
nmap -sS -e eth0 -S 12.12.12.12 192.168.0.102
I was trying to perform a SYN scan with a spoofed IP ...
0
votes
1answer
30 views
how check all running computes list in more than one vlan
I can get a list of running computes which do not ICMP Echo Reply disabled by using nmap, but there are some computers can not be scanned, because the computers have disabled ICMP Echo Reply or ...
0
votes
0answers
20 views
SSH Connection Blocked to my NAS but not sure why
I typically connect to a NAS from another PC via SSH, but recently the connection has stopped working and I'm not sure what's causing the issue. Typically, I connect over a dynamic IP hosting site, ...
0
votes
2answers
77 views
Where is the port number listed in this command result?
I am running simple port scans on my system and I don't know if I am confused or not.
After running lsof -i and my results are:
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
firefox-e ...
0
votes
1answer
21 views
nmap or ping a url with embedded port number?
Is it possible to use nmap to ping like a url with an embedded port number? .
How would I ping this? http://openleadr.org:8911/OpenADR2/Simple/2.0b?
I think nmap -p 8911 openleadr.org would work but ...
2
votes
1answer
146 views
What is the difference between nmap -D and nmap -S?
I am learning nmap , as per my understanding nmap -S <IP> is used to spoof your scan i.e. use an IP address other than your original IP address to show that the traffic was originated from the ...
0
votes
1answer
22 views
What type of nmap scan is: -sS -T 5
Is there a name given to this specific type of nmap scan:
sudo nmap -sS -T 5 192.168.1.145
Is there a specific term/name?
0
votes
0answers
66 views
Nmap shows 0 hosts up after any discovery scan?
I am running Kali in Virtual Box vm on Ubuntu. The network adapter is configured as Bridged with All options enabled.
When I try nmap -sn 192.168.0.1/26 I get no hosts discovered but I can ping known ...
1
vote
0answers
18 views
How do I add modules to PYTHONPATH variable for zenmap in Kali Linux [duplicate]
I installed zenmap in my Kali Linux but when tried to run it, the terminal gave me the following error telling me to add modules to the PYTHONPATH variable.
┌──(root💀kali)-[/home/kali/Downloads]
└─# ...
0
votes
0answers
85 views
nmap for Ubuntu 20.04.1 LTS
The command sudo nmap -sn 192.168.0.1/24 --disable-arp-ping on an Ubuntu 20.04.1 LTS machine and also a windows machine connected to a TP-Link 4g router sometimes works and sometimes does not find all ...
3
votes
1answer
3k views
Couldn't open a raw socket. Error: Permission denied (13)
I am trying to get familiar with hacking and networking by doing HackTheBox challenges. At starting point Oopsie I am supposed to use command nmap -sS -A 10.10.10.28. However, after running it in ...
0
votes
1answer
49 views
Why this oddity when using nmap?
My home router (Mikrotik RB750Gr2) has an internal IP address of 192.168.1.1 and a routing table which looks like this:
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0....
0
votes
1answer
309 views
Nmap does not show all devices connected to my network
I want to use xerosploit but when I scan my network, it just shows two devices
My device
My Router
Then I thought there was some problem in xerosploit, but when I scanned my network through nmap it ...
1
vote
0answers
20 views
Unable to ping scan my machine (but I can ping)
I need to perform an nmap scan on all of the (responding) IPs in an array of VLANs.
The command is nested in a PowerShell for loop and looks something like this:
nmap.exe -Pn -T4 -A -oG [FILE].txt -oX ...
0
votes
1answer
41 views
Why is my PC’s IP address not shown by nmap?
I scanned my home network using nmap 192.168.178.* and 192.168.178.0-255 but it doesn't show the IP of my PC. Then when I scan only my PC using -Pn it finds it. So why is my PC hidden?
And even after ...
0
votes
0answers
40 views
how to access and configure wifi repeater
My 5G signal does not penetrate through the whole house, so I figured I buy a WiFi repeater. This is installed and seems to work. However once I set up the WiFi inside the repeater it restarts and ...
0
votes
0answers
73 views
Conpot in Docker and Oschameleon does not work together. How to make it work together in a single machine?
I have been using Conpot, the ICS Honeypot for quite a while now. There is also a tool that is used to change the fingerprint of a machine by fooling nmap probes. It is called Oschameleon. Oschameleon ...
0
votes
0answers
46 views
My Nmap can't detect OS
I'm trying to use Nmap, so I download its application. Then my target is: "scanme.nmap.org" and I use Intense Scan
But something went wrong, after I check, my Nmap can't show its OS (OS ...
0
votes
0answers
40 views
A way to discover a connected/disconnected device from google wifi router
I'm trying to achieve a scriptable way to detect connected devices to my google wifi. Whenever a specified device (my iphone) connects, I would like to make a http request to a specified url. When ...
0
votes
0answers
37 views
How to find all valid IP addresses on local network without scanning a range of addresses?
Is there any other way except nmap -sn 192.168.0.0/24 to get the local network IP addresses? (such as getting a list from a DHCP server etc.)
0
votes
1answer
39 views
Finding other internal domains on a network
So on my school's network, I noticed that certain school services have their own internal domain names,
e.g Blackboard can be accessed by typing "blackboard/" in a browser, Email via "...
0
votes
1answer
27 views
Why does nmap report these samba ports as open?
I have an AWS server running linux. When I do an netstat -lntp from the machine itself, it shows me a few ports open (as expected), but it does not show 445 or 139. This makes sense, since I have ...
0
votes
0answers
109 views
Kali Linux Nmap issue while working with HTB
I wanna improve my cyber security abilities and I use Hack The Box(HTB) for practicing. I use Kali VM for it. I could connect to HTB before when machine was Kali 2017.2.That was old Kali so I decided ...
0
votes
2answers
50 views
Finding the IP of a VM in Bridged mode on another VM in bridged mode
I am trying to break into a VM (all legal) using another VM. They are both running in Bridged mode. The IP of my VM is 10.0.2.15 so my logic is to run nmap -sn 10.0.2.0/24 to scan my network but I'm ...
-1
votes
1answer
26 views
Same subnet but invisible to eachother
I am trying to run an octopi server on the raspberry and connect to it with the laptop.
I managed to get two devices (a raspberry pi 4 and a laptop) to be on the same subnet of a public wifi network ...
0
votes
0answers
23 views
nmap -O say I'm running a different version then I am
I am up to date on Windows 10 version 2004. I ran a nmap -O scan last night and now tonight again. I'm getting something different Windows 10 1809 - 1909. I would like to know why it has happened ...
0
votes
1answer
299 views
How to scan for minecraft lan games via terminal
I'm trying to figure out how to scan for Minecraft lan games on a local network. When I open up the game itself, the scan happens very quickly and almost immediately returns a list of local ip's and ...
0
votes
1answer
288 views
Is dnsmasq using port 53 a vulnerability?
I ran an nmap scan on my home network and linux machine. There were a few suspicious ports open so I used the command netstat -tanp|grep LISTEN to investigate further. The output was that dnsmasq is ...
0
votes
2answers
975 views
Unable to Get LAN Device Name Using NMAP or Arp
I want to get a list of the "friendly" device names on my network.
Everything I'm reading says, I should absolutely be able to do this via nmap. However, it doesn't work for me:
Starting ...
0
votes
1answer
92 views
How to submit information for an unknown nmap service when nmap does not provide the fingerprint?
I have a device which runs some embedded code (I know what exactly runs there) but nmap does not recognize it:
PORT STATE SERVICE VERSION
8266/tcp open unknown
I would be glad to provide the ...
0
votes
1answer
97 views
How long does a nmap syn scan with the timing template set to -T1 take and is there a way to improve it's speed?
I'm entirely new / excited to learn about computers, linux and most recently port scanning . After reading about nmap in a book, I began to read the manual & website of nmap, and play around with ...
0
votes
0answers
29 views
external scan vs internal scan
nmap external (public network) scan for a specific target shows:
PORT STATE SERVICE REASON
21/tcp open tcpwrapped syn-ack ttl 53
nmap internal scan (private network same IP as above ...
2
votes
1answer
101 views
Zenmap only shows the router
Zenmap (GUI of nmap) is only showing the router and not showing any other device on the network, even that i am certain that there are other devices that is the code i entered nmap -T4 -F 192.168.1.1/...
1
vote
1answer
118 views
Why does nmap think my computer has two IP addresses?
Nmap seems to think my computer has two IP addresses.
When I run ipconfig, I get
Connection-specific DNS Suffix . : home
Link-local IPv6 Address . . . . . : fe80::****:****:****:****%12
IPv4 ...
0
votes
1answer
64 views
How to find open ports using netstat?
When I do a netstat -tuln, I get the following output
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 127.0.0.1:25 0.0.0.0:* ...
0
votes
2answers
2k views
Nmap scan is not showing all devices in my network
I have an Android device that runs Android9 and also another Android device that runs Android6 on it. I shared Android9's internet to Android6 through a wifi connection. Then I shared the Android6's ...
0
votes
0answers
36 views
Open service port out of Docker
In installed some docker application on my virtual server, and I never modified the iptables policies.
When I run a full nmap to the virtual server I obtain,
Host is up (0.044s latency).
Not shown: ...
0
votes
1answer
200 views
How to close a lot of open ports on home laptop
I scanned my laptop for open ports. Nmap found about 1000+ open ports with unknown services. I tried to create rules in the Windows firewall that closed these ports, but this did not help. Also I used ...
0
votes
1answer
2k views
How to scan for live hosts: Nmap shows all IPs only when run as root when only 4 IPs are online and incomplete results when run as “--unprivileged.”
I have an issue with Nmap. I have Kali on my vm installed.
I want to scan the network for live hosts. But when I’m logged as root try nmap -sP 192.168.0.* Nmap reports that every IP in the subnet 192....
1
vote
1answer
203 views
how to nmap to show output text file has Discovered word and ip address and port for opened in window like in cmd?
option -oG not suitable for Excel to extract value in window because all ports in on line and not allowed to use bash
i automate with batch file, but output not have Discovered starting word and ...
1
vote
0answers
222 views
How to open telnet/ssh to Dlink DSL-225 router?
have D-link DSL 225 router that locate at 192.168.1.1 , with nmap I get
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
23/tcp open telnet
80/tcp open http
631/tcp open ipp
when I ...
1
vote
1answer
84 views
How to easily diff two nmap scan outputs?
I ran a scan, plugged in a raspberry pi, then ran a scan again. Is there a utility or option within nmap that can allow me to easily diff the two scan outputs to find the IP address of my raspberry ...
0
votes
1answer
23 views
nmap deleting user path
It's not much of a question that a warning, but still i was wondering if someone faced this issue.
I downloaded and installed the latest stable version of nmap (7.70) on my windows dev machine (i ...
1
vote
1answer
604 views
What are nmap's default timing values?
I often use nmap to scan a network, and at times need to play with the scan timing. Unfortunately, my timing experiments have been mostly fruitless, probably because I'm using values that are ...
1
vote
1answer
70 views
Network distruption when scanning with amass or nmap
When I'm scanning with amass with amass enum -active -brute -d {domain} the average queries performed are 151/sec and my connection gets disrupted at the point that it's not usable on any device ...
0
votes
1answer
204 views
Why is Nmap traceroute so fast?
Using Nmap's traceroute option shows only one hop and is extremely fast. I understand it works differently than traceroute in that it tries to guess the right TTL instead of beginning with 1. But ...
0
votes
0answers
541 views
Nmap not returning meaningful output
So for a security course homework we need to work with nmap. So far no problem. It basically just involves mapping a network that has been setup for us, scanning some ports, do some OS and service ...
0
votes
1answer
83 views
How to find ports marked as filtered by nmap
I have a host where if the command:
nmap <host ip>
is run, then get response:
All 1000 scanned ports on <host ip> are closed (958) or filtered (42)
So I want to find out which ports ...
