📱 Mobile Security Tips
Nina Kovacs — Consumer Security Analyst
What is Nmap?
Nmap (Network Mapper) is a powerful open-source tool used for network discovery and security auditing. It is widely used by security professionals for analyzing networks, scanning for open ports, and detecting vulnerabilities in systems. Its versatility makes it an essential tool in any pentester’s toolkit.
Installation
Nmap can be installed on various operating systems, including Windows, Linux, and macOS. To install Nmap:
- On Ubuntu/Debian:
sudo apt install nmap - On Red Hat/CentOS:
sudo yum install nmap - On Windows: Download the installer from the Nmap website.
- On macOS: Use Homebrew:
brew install nmap
Basic Syntax
The general syntax for using Nmap is:
Discovery
Basic Host Discovery
Identify live hosts in a range of IP addresses.
nmap -sn 192.168.1.0/24
Service Version Detection
Detect versions of running services.
nmap -sV -p 80,443 192.168.1.1
Scanning
Port Scanning
Scan for open ports on a host.
nmap -p 1-65535 192.168.1.1
Exploitation
TCP Connect Scan
This is used to find open ports by establishing a full TCP connection.
nmap -sT 192.168.1.1
Analysis
OS Detection
Detect the operating system of remote hosts.
nmap -O 192.168.1.1
Evasion
Fingeprint Evasion
Change the timing of the packets to avoid detection.
nmap -T2 192.168.1.1
Reporting
Export Scan Results
Export results to a file in XML format.
nmap -oX scan_results.xml 192.168.1.1
Quick Reference Table
| Flag | Description |
|---|---|
| -sP | Ping scan (discovery) |
| -sV | Service version detection |
| -O | Operating system detection |
| -oX | Output results in XML |
Pro Tips
- Use scripts: Nmap includes a scripting engine. Use
nmap --script vulnto scan for known vulnerabilities. - Combine options: Combine multiple scan types for comprehensive results, e.g.,
nmap -sS -sV -O 192.168.1.1.
Real-World Examples
- Case 1: Assessing Server Security:
nmap -p 22,80,443 -sV 192.168.1.10to find out which services are running and if they are up-to-date. - Case 2: Network Audit: For a full network audit, run
nmap -sP 192.168.1.0/24to identify all active devices.