nmap

Scan single host Basic port scan of a single host nmap 192.168.1.1 #nmap#network#scan Scan TCP SYN (stealth) Stealth SYN scan (requires root) nmap -sS 192.168.1.1 #nmap#network#syn Scan all ports Scan all 65535 ports nmap -p- 192.168.1.1 #nmap#network#ports Service version detection Probe open ports to determine service/version info nmap -sV 192.168.1.1 #nmap#network#version OS detection Enable OS detection (requires root) nmap -O 192.168.1.1 #nmap#network#os Aggressive scan Enables OS detection, version detection, script scanning, and traceroute nmap -A 192.168.1.1 #nmap#network#aggressive Scan a subnet Scan all hosts in a /24 subnet nmap 192.168.1.0/24 #nmap#network#subnet Ping scan (host discovery) Discover live hosts without port scan nmap -sn 192.168.1.0/24 #nmap#network#ping Scan specific ports Scan only specified ports nmap -p 22,80,443,8080 192.168.1.1 #nmap#network#ports Scan port range Scan ports in a given range nmap -p 1-1024 192.168.1.1 #nmap#network#ports UDP scan Scan UDP ports (slower, requires root) nmap -sU 192.168.1.1 #nmap#network#udp Run default scripts Run default NSE scripts against target nmap -sC 192.168.1.1 #nmap#network#scripts#nse Run specific NSE script Run a named Nmap scripting engine script nmap --script http-title 192.168.1.1 #nmap#network#scripts#nse Output to XML Save scan results in XML format nmap -oX scan.xml 192.168.1.1 #nmap#network#output Fast scan (top 100 ports) Scan only the 100 most common ports nmap -F 192.168.1.1 #nmap#network#fast