Aggressive scan

Enables OS detection, version detection, script scanning, and traceroute

nmap -A 192.168.1.1

More nmap commands

Scan a subnet

nmap 192.168.1.0/24

Scan all hosts in a /24 subnet
Ping scan (host discovery)

nmap -sn 192.168.1.0/24

Discover live hosts without port scan
Scan specific ports

nmap -p 22,80,443,8080 192.168.1.1

Scan only specified ports
Scan port range

nmap -p 1-1024 192.168.1.1

Scan ports in a given range
UDP scan

nmap -sU 192.168.1.1

Scan UDP ports (slower, requires root)