Hot answers tagged

72 votes

What is the recommended way to get nmap on OSX?

First Option Nmap's Official Website Download the latest official installer here: https://nmap.org/download.html#macosx Check this out for additional information: https://nmap.org/book/inst-macosx....
  • 2,611
21 votes
Accepted

Couldn't open a raw socket. Error: Permission denied (13)

Did you install nmap using: $ sudo snap install nmap or $ sudo apt install nmap I had this same issue, I installed using snap and was getting the same error as you. If that is the case remove the snap ...
  • 226
15 votes

What is the recommended way to get nmap on OSX?

The package manager for MacOS that apple mention https://developer.apple.com/opensource/ is MacPorts. And the nmap website mentions MacPorts. A package manager that people often use with MacOS, is ...
  • 22.6k
15 votes

Couldn't open a raw socket. Error: Permission denied (13)

You have to grant network access to nmap with: snap connect nmap:network-control
  • 251
13 votes
Accepted

different behavior: "sudo nmap" vs just "nmap"?

By default an unprivileged scan uses -sT (TCP Connect) while privileged (root) uses -sS (TCP SYN Stealth). TCP Connect (-sT) Connect scan uses the system call of the same name to scan machines, ...
10 votes

What is the difference between nmap and netstat?

Nmap is a Network mapping tool. That means it's used to discover informations about hosts on a network (their ip, open ports, etc). Whereas Netstat is a network statistic tool used to list active ...
8 votes
Accepted

nmap takes minutes to scan localhost

Nmap is not the best tool to use for this. I love Nmap, and my full time job is working on and promoting it, but this is one case where it is not the best tool for the job. The Linux kernel keeps ...
  • 1,858
7 votes

How to get device name from scan like nmap on Linux

Nmap Some hosts could simply be configured to not share that information. It should work just like this: user@host:~$ nmap 192.168.1.113 Starting Nmap 7.00 ( https://nmap.org ) at 2015-12-11 08:45 ...
  • 2,611
7 votes

What is the difference between nmap and netstat?

Nmap and netstat have lots of features that are very different from each other, but there are some that are harder to distinguish. In the "obvious differences" category, netstat can: show currently-...
  • 1,858
7 votes
Accepted

SSL Unsupported protocol error

The problem is that the Linux ncat server will only use TLS1.2 for SSL connections. The Windows ncat is not using TLS1.2. This causes the unsupported protocol error. I can replicate this issue using ...
  • 313
5 votes

What is the "park-agent" service used for?

By the time you've made this question u probably already know the answer... But here goes the answer: This port is related to uPNP services. I've made a port scanning on my home router and found this "...
  • 51
5 votes
Accepted

Detect if iPhone is active on network

The best solution I could come up with is to nmap -p 62078 IP-ADDRESS | grep "62078/tcp open". If the iPhone is not seen in 60 minutes, it is marked as away. See https://github.com/Znarkus/homie/blob/...
  • 2,147
5 votes

What is another use for port 8080/8443 other than a proxy?

Although Google would get these answers quickly, 8080 is officially recognized as HTTP Alternate of 80, essentially the same function. From Wikipedia HTTP alternate (http_alt)—commonly used for Web ...
  • 6,359
5 votes

Error Nmap: 'dnet: Failed to open device wifi0' on Ubuntu (W10 bash)

Yes, generally speaking Nmap is not supported on Windows Subsystem for Linux (WSL). The WSL folks don't like statements like this, though, because support is always improving. You can track this ...
  • 1,858
4 votes
Accepted

Why doesn't OS scan work against your own machine?

Because nmap does its work by performing various "side-channel attacks" on the packets that are received back from the requests it makes. It expects the packet to go through the normal path of nmap ...
4 votes

What's the difference between -sS and -sT on nmap?

What's the difference between -sS and -sT on nmap? SCAN TYPES -sS TCP SYN scan: This technique is often referred to as "half-open" scanning, because you don’t open a full ...
  • 149k
4 votes

Nmap shows 554 and 7070 open on EVERY machine even when they are closed/filtered

Certain routers intercept traffic on these ports, I can confirm that the BT Homehub does. I can telnet any_random_ip 7070 and get a connection.
4 votes

different behavior: "sudo nmap" vs just "nmap"?

I have noticed the same behavior on my Mac. It is really strange. It appears that NMAp with sudo privileges gets some informations from the ARP cache. And so, if you scan a device that is ...
  • 151
4 votes

different behavior: "sudo nmap" vs just "nmap"?

Basically, by default: A privileged user executes an -sS (TCP SYN scan). This type of scan requires raw socket / raw packet privileges. An unprivileged user executes an -sT (TCP connect scan). This ...
  • 2,611
4 votes

Using nmap to traceroute on a specific port

Nmap specifically chooses probes for traceroute from what it knows about the target, choosing probes that are most likely to make it all the way to the target. For this reason, its traceroute is not ...
  • 1,858
4 votes

Why does Nmap behavior vary depending on how the scanning machine is connected to the Internet?

nmap performs scans only upon the online hosts it finds online from the host list given as input, In your case 2 nmap is able to find the host online by default probing method that is ICMP which was ...
4 votes
Accepted

How do I find an intermediate switch's IP address on my LAN?

Switches are "layer 2" devices that forward link-layer frames (not IP packets), so they don't need to have an IP address to do their job, and they might actually not have one – and even if ...
  • 399k
3 votes
Accepted

Ping sweep LAN without specifying IP

ip route is probably the easiest way to get this information and is correct in most situations. root@myhost:~# ip route default via 192.168.2.1 dev eth1 192.168.2.0/24 dev eth1 proto kernel scope ...
  • 71.9k
3 votes
Accepted

Find forgotten IP address of bridge

First, do some broadcast and all-hosts multicast pings: ping 255.255.255.255 ping 224.0.0.1 …then look at your ARP table: arp -an Second, If that didn't work, hook up your machine directly to the ...
  • 99.2k
3 votes

SSL Unsupported protocol error

Check in your /ect/ssl/openssl.conf if there is something that sets a minimum TLS version. For example I found this at the bottom of my config: [system_default_sect] MinProtocol = TLSv1.2 ...
3 votes
Accepted

Windows equivalent to nmap

The Windows equivalent to nmap is nmap. You can download a pre-built installer, complete with the CLI tools and the Npcap driver needed for advanced scanning options. The reason the answerer says ...
  • 399k
3 votes
Accepted

What are nmap's default timing values?

I found the followig values in the nmap-manual and nmap-book https://nmap.org/book/performance-timing-templates.html https://nmap.org/book/man-performance.html --min-hostgroup/max-hostgroup min: ...
  • 316
3 votes
Accepted

What is the difference between nmap -D and nmap -S?

The goal of both options is similar, however -D allows you to specify a number of hosts. Therefore, according to the man page the syntax is actually slightly different than outlined by you, ie -D ...
  • 592
3 votes

Where is the port number listed in this command result?

On the first line, the port is 44376, correct? Yes, the local port is 44376. However, you’re looking at an established connection between your system and a remote host. Having a connection on some ...
  • 56.9k

Only top scored, non community-wiki answers of a minimum length are eligible