72
votes
What is the recommended way to get nmap on OSX?
First Option
Nmap's Official Website
Download the latest official installer here:
https://nmap.org/download.html#macosx
Check this out for additional information:
https://nmap.org/book/inst-macosx....
- 2,611
21
votes
Accepted
Couldn't open a raw socket. Error: Permission denied (13)
Did you install nmap using:
$ sudo snap install nmap
or
$ sudo apt install nmap
I had this same issue, I installed using snap and was getting the same error as you. If that is the case remove the snap ...
- 226
15
votes
What is the recommended way to get nmap on OSX?
The package manager for MacOS that apple mention https://developer.apple.com/opensource/ is MacPorts. And the nmap website mentions MacPorts.
A package manager that people often use with MacOS, is ...
- 22.6k
15
votes
Couldn't open a raw socket. Error: Permission denied (13)
You have to grant network access to nmap with:
snap connect nmap:network-control
- 251
13
votes
Accepted
different behavior: "sudo nmap" vs just "nmap"?
By default an unprivileged scan uses -sT (TCP Connect) while privileged (root) uses -sS (TCP SYN Stealth).
TCP Connect (-sT)
Connect scan uses the system call of the same name to scan machines, ...
- 370
10
votes
What is the difference between nmap and netstat?
Nmap is a Network mapping tool. That means it's used to discover informations about hosts on a network (their ip, open ports, etc). Whereas Netstat is a network statistic tool used to list active ...
- 353
8
votes
Accepted
nmap takes minutes to scan localhost
Nmap is not the best tool to use for this. I love Nmap, and my full time job is working on and promoting it, but this is one case where it is not the best tool for the job. The Linux kernel keeps ...
- 1,858
7
votes
How to get device name from scan like nmap on Linux
Nmap
Some hosts could simply be configured to not share that information. It should work just like this:
user@host:~$ nmap 192.168.1.113
Starting Nmap 7.00 ( https://nmap.org ) at 2015-12-11 08:45 ...
- 2,611
7
votes
What is the difference between nmap and netstat?
Nmap and netstat have lots of features that are very different from each other, but there are some that are harder to distinguish. In the "obvious differences" category, netstat can:
show currently-...
- 1,858
7
votes
Accepted
SSL Unsupported protocol error
The problem is that the Linux ncat server will only use TLS1.2 for SSL connections. The Windows ncat is not using TLS1.2. This causes the unsupported protocol error.
I can replicate this issue using ...
- 313
5
votes
What is the "park-agent" service used for?
By the time you've made this question u probably already know the answer... But here goes the answer: This port is related to uPNP services. I've made a port scanning on my home router and found this "...
- 51
5
votes
Accepted
Detect if iPhone is active on network
The best solution I could come up with is to nmap -p 62078 IP-ADDRESS | grep "62078/tcp open". If the iPhone is not seen in 60 minutes, it is marked as away.
See https://github.com/Znarkus/homie/blob/...
- 2,147
5
votes
What is another use for port 8080/8443 other than a proxy?
Although Google would get these answers quickly, 8080 is officially recognized as HTTP Alternate of 80, essentially the same function. From Wikipedia
HTTP alternate (http_alt)—commonly used for Web ...
- 6,359
5
votes
Error Nmap: 'dnet: Failed to open device wifi0' on Ubuntu (W10 bash)
Yes, generally speaking Nmap is not supported on Windows Subsystem for Linux (WSL). The WSL folks don't like statements like this, though, because support is always improving. You can track this ...
- 1,858
4
votes
Accepted
Why doesn't OS scan work against your own machine?
Because nmap does its work by performing various "side-channel attacks" on the packets that are received back from the requests it makes. It expects the packet to go through the normal path of
nmap
...
- 30.5k
4
votes
What's the difference between -sS and -sT on nmap?
What's the difference between -sS and -sT on nmap?
SCAN TYPES
-sS TCP SYN scan:
This technique is often referred to as "half-open"
scanning, because you don’t open a full ...
- 149k
4
votes
Nmap shows 554 and 7070 open on EVERY machine even when they are closed/filtered
Certain routers intercept traffic on these ports, I can confirm that the BT Homehub does. I can telnet any_random_ip 7070 and get a connection.
- 41
4
votes
different behavior: "sudo nmap" vs just "nmap"?
I have noticed the same behavior on my Mac. It is really strange.
It appears that NMAp with sudo privileges gets some informations from the ARP cache. And so, if you scan a device that is ...
- 151
4
votes
different behavior: "sudo nmap" vs just "nmap"?
Basically, by default:
A privileged user executes an -sS (TCP SYN scan).
This type of scan requires raw socket / raw packet privileges.
An unprivileged user executes an -sT (TCP connect scan).
This ...
- 2,611
4
votes
Using nmap to traceroute on a specific port
Nmap specifically chooses probes for traceroute from what it knows about the target, choosing probes that are most likely to make it all the way to the target. For this reason, its traceroute is not ...
- 1,858
4
votes
Why does Nmap behavior vary depending on how the scanning machine is connected to the Internet?
nmap performs scans only upon the online hosts it finds online from the host list given as input,
In your case 2 nmap is able to find the host online by default probing method that is ICMP which was ...
- 288
4
votes
Accepted
How do I find an intermediate switch's IP address on my LAN?
Switches are "layer 2" devices that forward link-layer frames (not IP packets), so they don't need to have an IP address to do their job, and they might actually not have one – and even if ...
- 399k
3
votes
Accepted
Ping sweep LAN without specifying IP
ip route is probably the easiest way to get this information and is correct in most situations.
root@myhost:~# ip route
default via 192.168.2.1 dev eth1
192.168.2.0/24 dev eth1 proto kernel scope ...
- 71.9k
3
votes
Accepted
Find forgotten IP address of bridge
First, do some broadcast and all-hosts multicast pings:
ping 255.255.255.255
ping 224.0.0.1
…then look at your ARP table:
arp -an
Second, If that didn't work, hook up your machine directly to the ...
- 99.2k
3
votes
SSL Unsupported protocol error
Check in your /ect/ssl/openssl.conf if there is something that sets a minimum TLS version.
For example I found this at the bottom of my config:
[system_default_sect]
MinProtocol = TLSv1.2
...
3
votes
Accepted
Windows equivalent to nmap
The Windows equivalent to nmap is nmap. You can download a pre-built installer, complete with the CLI tools and the Npcap driver needed for advanced scanning options.
The reason the answerer says ...
- 399k
3
votes
Accepted
What are nmap's default timing values?
I found the followig values in the nmap-manual and nmap-book
https://nmap.org/book/performance-timing-templates.html
https://nmap.org/book/man-performance.html
--min-hostgroup/max-hostgroup
min: ...
- 316
3
votes
Accepted
What is the difference between nmap -D and nmap -S?
The goal of both options is similar, however -D allows you to specify a number of hosts.
Therefore, according to the man page the syntax is actually slightly different than outlined by you, ie -D ...
- 592
3
votes
Where is the port number listed in this command result?
On the first line, the port is 44376, correct?
Yes, the local port is 44376. However, you’re looking at an established connection between your system and a remote host. Having a connection on some ...
- 56.9k
Only top scored, non community-wiki answers of a minimum length are eligible