📱 Mobile Security Tips
Priya Nair — Digital Privacy Expert
What is Nmap?
Nmap, or Network Mapper, is a free and open-source tool used for network discovery and security auditing. Perfect for system administrators and security professionals, Nmap’s primary purpose is to discover hosts and services on a computer network by sending packets and analyzing the responses. It is also a vital tool for penetration testers looking to identify vulnerabilities in systems.
Installation
Nmap can be installed on various operating systems including Windows, Linux, and macOS. Below are the basic installation steps for each:
- Windows: Download the Nmap installer from the Nmap official website, then run the installer.
- Linux: For Debian-based systems, use:
sudo apt install nmap. For Red Hat-based systems, use:sudo yum install nmap. - macOS: Use Homebrew with:
brew install nmap.
Basic Syntax
The basic syntax for Nmap is:
nmap [options] [target]
Discovery
Discover Live Hosts
To find active devices in a network:
nmap -sn 192.168.1.0/24
Service Version Detection
To gather information about the services running on open ports:
nmap -sV 192.168.1.1
Scanning
Full TCP Scan
To perform a full TCP scan on a target:
nmap -sS 192.168.1.1
Scan Specific Ports
To scan specific ports:
nmap -p 22,80,443 192.168.1.1
Exploitation
Script Scanning
To use Nmap’s scripting engine for more detailed scans:
nmap --script http-vuln* 192.168.1.1
Analysis
Output to XML
To save scan results in XML format for later analysis:
nmap -oX output.xml 192.168.1.1
Evasion
Evasion Techniques
To avoid detection by firewalls or IDS:
nmap -D RND:10 192.168.1.1
This command uses decoy scanning to obfuscate the source of the scan.
Reporting
Generate a Simple Text Report
For a simple report in text format:
nmap -oN report.txt 192.168.1.1
Quick Reference Table
| Flag | Description |
|---|---|
| -sS | TCP SYN scan (stealth scan) |
| -sV | Service version detection |
| -p | Specify ports |
| -oX | Output in XML format |
| -D | Decoy for evasion |
Pro Tips
- Use specific hostnames: Instead of IP addresses, you can use DNS names in your scans which can help with clarity.
- Run scans in the background: Use
nmap -oN - 192.168.1.1 &to check your network while doing other tasks.
Real-World Examples
Here are some advanced usages of Nmap:
- Scanning a range of IPs:
nmap -p 1-65535 192.168.1.0/24scans all ports on the subnet. - Using Nmap for OS Detection:
nmap -O 192.168.1.1detects the operating system of the target.