📱 Mobile Security Tips
Sarah Chen — iOS Security Specialist
What is Nmap?
Nmap (Network Mapper) is an open-source tool for network exploration and security auditing. It is widely used by system administrators, network engineers, and penetration testers to discover hosts and services on a computer network.
Installation
Nmap can be installed on various platforms including Linux, Windows, and macOS. To install on Linux, use the package manager. For example:
sudo apt-get install nmap
For Windows, download the installer from the official Nmap website.
Basic Syntax
The basic syntax of Nmap is:
nmap [options] [target]
For example, to perform a simple scan on a target IP:
nmap 192.168.1.1
Discovery
Use Nmap for discovering hosts and services with these commands:
nmap -sn 192.168.1.0/24
This command performs a ping scan on the specified subnet to identify live hosts.
Scanning
To perform more in-depth scans, use:
nmap -sS 192.168.1.1 – This performs a SYN scan.
Exploitation
While Nmap is primarily for scanning, you can use the output for further exploitation:
nmap -O 192.168.1.1
This option enables OS detection, providing vital information for exploitation.
Analysis
After scanning, analyzing the results is crucial:
nmap -sV 192.168.1.1 – This identifies service versions running on open ports.
Evasion
For stealthier scans, consider:
nmap -D RND:10 192.168.1.1 – This uses decoy scanning options to obscure the source of the scan.
Reporting
Save your results with:
nmap -oN scan_results.txt 192.168.1.1 – This outputs the results to a file.
Quick Reference Table
| Flag | Description |
|---|---|
| -sP | Ping scan (no port scan) |
| -sS | TCP SYN scan |
| -sV | Service/version detection |
| -O | OS detection |
| -D | Decoy scanning |
| -oN | Normal output to file |
Pro Tips
- Combine flags for advanced scans:
nmap -sS -sV -O 192.168.1.1for a detailed scan. - Use the
--scriptoption for vulnerability scanning.
Real-World Examples
Here are a couple of scenarios where Nmap shines:
Example 1: Network Discovery
nmap -sn 10.0.0.0/24
This quickly identifies active devices in the specified subnet.
Example 2: Penetration Testing
nmap -sS -sV -O 10.0.0.1
This command performs a stealth scan on a single target, looking for services and OS information.