a free and open-source port scanner, operating system fingerprinter, and service fingerprinter

learn more… | top users | synonyms

0
votes
1answer
9 views

Can masscan use the Nmap Scripting Engine?

There is a great tool: https://github.com/robertdavidgraham/masscan that we can use if a bigger network need to be scanned for various aspects. But, can the masscan use the Nmap Scripting Engine? ...
0
votes
1answer
39 views

nmap won't recognize a hostname on my local area network

Scanning the machine on the LAN with my laptop, I got this: gabriele @ osiris { ~ } [ Tue Oct 07 ] [ 08:49 PM] nmap -sP 192.168.1.236 Starting Nmap 6.40 ( http://nmap.org ) at 2014-10-07 20:50 CEST ...
0
votes
1answer
55 views

nmap ipv6 os scan fails

When scanning a ubuntu machine with nmap using ipv6 address, nmap cannot determine the os type and only print the os fingerprint. Although when scanning the same host with ipv4 address it correctly ...
3
votes
1answer
39 views

Difference between ssl/https and plain https in nmap output

I'm trying to analyze the behavior of an IP that works as free WiFi access point. nmap with parameter (-sV) reports the following for two different measurements: PORT STATE SERVICE VERSION 443/tcp ...
3
votes
0answers
52 views

Why doesn't ufw enforce firewall rules for traffic coming from Virtualbox VM

I've been running Linux Mint 17 on my laptop for a while and thought I had it locked down to not allow any incoming traffic through "Firewall Configuration" (ufw GUI)—I have also validated this from ...
1
vote
1answer
129 views

masscan. how to configure Linux?

I've set this in my sysctl.conf: net.netfilter.nf_conntrack_max=268435456 Because, this border 16,777,216 achieved very quick. Also, I've decrease timeouts: net.ipv4.tcp_fin_timeout = 30 ...
23
votes
5answers
2k views

How to close ports in Linux?

I have some question in closing port, I think I got some strange things. When I use execute nmap --top-ports 10 192.168.1.1 it shows that 23/TCP port is open. But when I execute nmap --top-ports ...
0
votes
1answer
333 views

How to scan for heartbleed vulnerability with nmap from Ubuntu 12.04?

[root@notebook ~] lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 12.04.4 LTS Release: 12.04 Codename: precise [root@notebook ~] dpkg -l nmap | grep ^ii ...
1
vote
0answers
427 views

Postgresql 9.1 - Kali Linux

I start to read this book : http://www.amazon.fr/Metasploit-The-Penetration-Testers-Guide/dp/159327288X And i have some trouble in using postgresql 9.1 (in Kali Linux). When i start msfconsole, i ...
5
votes
2answers
1k views

Why are some ports reported by nmap filtered and not the others?

I'm scanning a server which should have a pretty simple firewall using iptables: by default everything is DROPped besides RELATED and ESTABLISHED packets. The only type of NEW packets allowed are TCP ...
1
vote
1answer
87 views

Nmap too slow with a network that can't access to internet

I am using CentOS 6.5 and Nmap 5.51 I want to find all alive IPs in a LAN between two IPs Easily get the answer sudo nmap -sP 192.168.1.100-200 my problem when my network can access to ...
1
vote
5answers
381 views

Use awk to find all Ports for each IP that have https open

I'd like to print all ips (IP space Port) which have open https ports given a gnmap file. An example output for a line that has only https running on port 443: 123.123.123.123 443 A more ...
1
vote
2answers
145 views

What does the following script do? [closed]

This was a question on my study guide, and I believe that the script is pinging the ip addresses, so the 2nd choice. Can somebody confirm this for me? The 5th column of NMAP output below is the IP ...
1
vote
1answer
342 views

How to see interactive output when running nmap from a bash script?

I'm trying to run nmap from a Bash script, in a way so that when Enter is pressed it should give some output, as happens when running directly from the commandline. When calling a few different nmap ...
3
votes
3answers
263 views

Nmap -sn: scan or no scan?

The nmap man page has this to say about the -sn parameter: -sn (No port scan) . This option tells Nmap not to do a port scan after host discovery, and only print out the available hosts that ...
8
votes
3answers
10k views

How to “close” open ports?

A few days ago I started to care a lot about my data security, I end up nmaping myself with: nmap 127.0.0.1 Surprise, surprise, I have lots of active services listen to localhost: $ nmap 127.0.0.1 ...
4
votes
1answer
171 views

Why Nmap fragmented scan on Linux is only working from virtual environment?

OLD QUESTION AND TITLE (Look further down for the updated question): Why Nmap fragmented scan is only working on Backtrack? I spent quite a few hours today trying to capture and study some ...
2
votes
1answer
354 views

Running a local port scan and found open ports but, don't know what they're used for?

I wrote a very basic python script to port scan my system. I'm running linux-mint lisa: open_ports = [] for port in xrange(65536): conn = socket.socket(socket.AF_INET, socket.SOCK_STREAM) ...
4
votes
1answer
2k views

Run nmap via Tor

Is it possible to runnmap via Tor? When I googled around, I got the impression that Tor uses Polipo / Privoxy, which are socks5 proxies. So any TCP / UDP aware applications should be able to use them ...
1
vote
0answers
694 views

Using nmap's sql-injection script to scan a specific web folder

I'm fairly new to linux and nmap. I'm using debian squeeze. I tried installing an SQL-injection script for nmap. I was able to successfully run a test scan agains my web server running Windows. ...
2
votes
3answers
2k views

Grepping several lines from Nmap output

I apologize in advance as this is a simple question. So I'm attempting to scan a Class C to identify all mail servers by IP. The vast majority of IPs aren't mail servers. I'm trying to filter out the ...
2
votes
2answers
726 views

nmap isn't showing sshd?

I want to open a ssh terminal but it gives me a connection refused on port 22. My nmap doesn't list a port 22? How can I connect to my server? PORT STATE SERVICE 21/tcp open ftp ...
1
vote
1answer
232 views

How to skip (omit) a sepcific port in nmap

With nmap, I want to skip the scan on port 80. I'm sure this is in the man somewhere, but I haven't found it so far. My command is simple: nmap 24.0.0.1\24 So this will scan ports in the 24.0.0.x ...
1
vote
3answers
3k views

Fastest way to port scan. NMAP?

I am looking for a quick way to scan for commonly open ports on proxies. I am doing this through php and I have been using nmap and came up with this command: <?php system("nmap -PN -p ...
0
votes
2answers
2k views

nmap script needed to output text into csv format

ultimately I am looking to insert some info into a database. So I'm trying to output a file from something (probably nmap) that is formatted like this: 10.1.150.1,Up,1/3/2012,host.domain.lan ...
3
votes
3answers
297 views

Questions about nmap

I have several questions about nmap. First, nmap can detect servers via: link-layer network-layer transport-layer What are the differences (not in the layer, but in the way that nmap does it) and ...
0
votes
4answers
542 views

NMAP probing VirtualBox Client

Cannot seem to probe virtual guests from the virtual host. These guests can be probed from other devices on the same LAN/Network, but not the host. I can understand why it might be struggling, but I ...
3
votes
1answer
167 views

Doing nmap on a network

I used nmap to scan all the ports in the hosts in a network by using the command: $ nmap 172.31.100.0/24 What I found is that it showed the following in the result: Nmap scan report for ...
5
votes
2answers
358 views

How to remotely detect another machine's utorrent version with nmap?

How can I use nmap to find out the utorrent version installed on a PC by scanning it from another PC on the same subnet?
-1
votes
2answers
2k views

How to generate random IP addresses

$ nmap -n -iR 0 -sL > RANDOM-IPS-TMP.txt $ grep -o "[0-9]*\.[0-9]*\.[0-9]*\.[0-9]*" RANDOM-IPS-TMP.txt | egrep -v "10.*|172.[16-32].*|192.168.*|[224-255].*" > RANDOM-IPS.txt egrep: Invalid ...
0
votes
3answers
872 views

How to get info about given webserver FAST?

$ time nmap -q -sV -P0 -p80 google.com | fgrep '80/tcp open' 80/tcp open http Google httpd 2.0 (GFE) real 0m6.563s user 0m0.280s sys 0m0.016s $ Are there any faster methods to get info ...