Portscanning mit NMAP

Nützliche Zusatz Parameter

• -P0
  Scannt auch ohne Ping Antwort.
• -O
  Liest die OS Version aus.
• -A
  Liest die OS Version und die Software Versionen aus.

Standard Rechner Scan

nmap -v -A -T4 192.168.1.1

Standard Rechner Scan um alle Ports zu scannen

nmap -v -A -T4 -p- 192.168.1.1

Subnetz nach bestimmten Port scannen

nmap -v -p 445 192.168.1.0/24

TCP Connect scanning auf localhost und Netzwerk 192.168.1.0/24

nmap -v -sT localhost
nmap -v -sT 192.168.1.0/24

nmap TCP SYN (half-open) scanning

nmap -v -sS localhost
nmap -v -sS 192.168.1.0/24

nmap TCP FIN scanning

nmap -v -sF localhost
nmap -v -sF 192.168.1.0/24

nmap TCP Xmas tree scanning

Useful to see if firewall protecting against this kind of attack or not:

nmap -v -sX localhost
nmap -v -sX 192.168.1.0/24

nmap TCP Null scanning

Useful to see if firewall protecting against this kind attack or not:

nmap -v -sN localhost
nmap -v -sN 192.168.1.0/24

nmap TCP Windows scanning

nmap -v -sW localhost
nmap -v -sW 192.168.1.0/24

nmap TCP RPC scanning

Useful to find out RPC (such as portmap) services

nmap -v -sR localhost
nmap -v -sR 192.168.1.0/24

nmap UDP scanning

Useful to find out UDP ports

nmap -v -sU localhost
nmap -v -sU 192.168.1.0/24

nmap remote software version scanning

You can also find out what software version opening the port.

nmap -v -sV localhost
nmap -v -sV 192.168.1.0/24