Questions tagged [nmap]

a free and open-source port scanner, operating system fingerprinter, and service fingerprinter

Filter by
Sorted by
Tagged with
0
votes
2answers
49 views

How can I use nmap -p and cat 'file'?

I am trying to create a simple bash script that can run the "specific" port scan on mulitple IPs and Ports using nmap -p. The issue I am having is that when it reads the port# followed by ...
0
votes
3answers
76 views

Best tool to use to extract command output

I want to programatically process the results of nmap output but cannot work out how to take the output and extract just the details of the protocol or port tables shown in the two outputs below. I am ...
0
votes
1answer
41 views

nmap & ssl-enum-ciphers

I am trying to check for the offered ciphers with nmap: $ nmap -Pn --script ssl-enum-ciphers host1.example.org -p 443 Starting Nmap 7.92 ( https://nmap.org ) at 2021-12-13 14:52 CET Nmap scan report ...
0
votes
2answers
28 views

How to change the name that evokes a program in Debian-based distros

I want to install a fork of nmap in Kali Linux, but I'm worried that it will conflict with the original program when I type nmap in the terminal. Can I change its name from nmap to nmap2?
-2
votes
1answer
32 views

OWASP Guide for web app penetration testing says use "nmap –PN –sT –sV –p0" but in my Kali OS it says failed to resolve

On page 35 of the Owasp testing guide, it says to use Nmap as: nmap –PN –sT –sV –p0-65535 192.168.1.100 but running this on my machine with the -PN -sT -p0 flags gives the following errors: Failed to ...
0
votes
0answers
23 views

What is ftranhc service?

This the output of a nmap $ sudo nmap 192.168.0.33 Starting Nmap 7.80 ( https://nmap.org ) at 2021-11-16 16:13 UTC Nmap scan report for 192.168.0.33 Host is up (0.0062s latency). Not shown: 997 closed ...
-1
votes
1answer
27 views

How do I gain access to a server if it has no ports open?

I know the IP address and the root password of a server running Linux, but it has no network ports opened. I can ping it and it responds. How do I gain access to it?
1
vote
2answers
69 views

How to get IP addr from MAC

I'm trying to connect to a second-hand external wifi camera. It has an ethernet slot and a sticker with the MAC address but no other branding or model/serial numbers. I am trying to find its IP ...
1
vote
1answer
31 views

Nmap is not sending ICMP timestamp requests when -PP flag is set

I'd like nmap to send ICMP timestamp requests to the host. To achieve this I use the command: nmap -PP "ip addr" But among requests generated by nmap there are no ICMP requests, only TCP ...
2
votes
1answer
110 views

How to open a filtered port

Somehow I keep breaking ssh on my ubuntu servers and I can't figure out why. I have a ddns set up as myserver.asuscomm.com and the ports are forwarded on my router. One of them works perfectly, but ...
0
votes
1answer
51 views

Why only a few ports (like ssh, http, https) are appeared to be open while all others are closed in nmap, on a host without firewall?

I have two Debian 11 machines (192.168.0.2 & 192.168.0.3) connected to the same router (gateway at 192.168.0.1). I have disabled firewall (ufw) of both. But when I did a port scan via nmap from ...
0
votes
0answers
17 views

How to tell nmap to give up on target quickly, but not for port scan?

I'm scanning a host: nmap 192.168.0.100 And if that host is down, I don't want nmap to wait for long - I want nmap to give up quickly. So I found --host-timeout in the manpage. However, that ...
0
votes
1answer
96 views

How do I get nmap to list all devices connected to my ATT wifi?

Using Ubuntu, I attempted to list all devices connected to my wifi with $ sudo nmap -sn 192.168.1.83/24 Starting Nmap 7.80 ( https://nmap.org ) at 2021-08-19 10:35 CDT Nmap scan report for amazon-...
1
vote
2answers
77 views

NMap show only IP addresses that are down

An excellent command shows only those IP addresses that are responding nmap -n -sn 192.168.1.0/24 -oG - | awk '/Up$/{print $2}' Looking through all these can be a pain to find a few that are not ...
0
votes
1answer
466 views

Nmap 7.8 Assertion failed: htn.toclock_running == true

All of a sudden, nmap throws the following error after executing the canonical sudo nmap -sP 192.168.109.* : nmap: Target.cc:503: void Target::stopTimeOutClock(const timeval*): Assertion `htn....
0
votes
2answers
66 views

How to find out the static IP address of a device?

I have got an IP camera which, according to the manual, is supposed to have static IP address 192.168.1.110. To connect to it (and change the network settings) I configured my laptop to have static IP ...
0
votes
1answer
27 views

Nmap stalling after reboot

I use nmap to find devices on my network that has the port 5300 open. At first it worked great. I could find devices in no time, but then I rebooted my computer and now nmap just stalls during the ...
1
vote
2answers
82 views

How to make a port open?

When I ping, there is reply. $ ping 10.26.14.16 64 bytes from 10.26.140.160: icmp_seq=1 ttl=63 time=0.525 ms When I ping with port, there is no reply. $ nmap -p 5016 10.26.14.16 5016/tcp closed ...
0
votes
1answer
72 views

Why do nmap, ss (netscan?) and lsof give different results?

I'm trying to understand which ports are actively listening (in use?) on my machine and don't really know what I'm doing. The three commands I've experimented with are nmap, ss (?netscan?) and lsof. ...
0
votes
2answers
235 views

Why can't I run nmap with the -O option even when I use sudo

I'm trying to determine which ports are in use with my machine. I found, online an article that listed one method as follows: $ sudo nmap -sT -O localhost I believedthis would give me a list of all ...
-5
votes
1answer
54 views

nmap taking ages

I am using Try Hack Me to attempt to learn but they tell me to run nmap -A -p- and it is taking over an hour for a scan. I am really new to this and want to know is there a faster way to perform a ...
0
votes
0answers
25 views

Make nmap respond quicker to hosts that are down

I’m using nmap to ping 150k IP addresses, the problem is it takes too long to check the down IPs. It’s taking less than a second to check for the IPS that are up but if any are down it slows the ...
-2
votes
1answer
92 views

Passing Dig command in nmap

I have an issue to take the result of the dig command and pass it to nmap command like: for ip in 'dig mydomain.com -t ns +short' do nmap $ip done
0
votes
0answers
16 views

Can I get the full hostkey from a fingerprint?

I am beginning my journey into cybersecurity/pentesting. Using nmap -A [network] it displays the networks hostkey fingerprints. How do you create the entire hostkey from that? And then would it ...
0
votes
1answer
52 views

fping output vs. nmap -sn output behind two firewalls

I've tried to scan a network, behind two firewalls, for online hosts only. With fping I did: fping -a -q -g 192.168.222.0/24 and I got this output @>~]$ > fping -a -q -g 192.168.222.0/24 192.168....
0
votes
1answer
5k views

nmap: Couldn't open a raw socket. Error: Permission denied (13)

I'm attempting to run the following command on an Ubuntu box (ssh from Windows 10 PowerShell): sudo nmap -sU -O localhost Starting Nmap 7.91 ( https://nmap.org ) at 2021-03-02 10:13 GMT Couldn't open ...
0
votes
0answers
15 views

scan specific udp port for local network

So I have a Prometheus server which I use to capture input from port 512 UDP, I have it open, but now I have a problem checking which 512 UDP port on my network is the sender. I tried reading the nmap ...
-3
votes
1answer
58 views

unable to use script on kali llinux [closed]

#! /bin/bash nmap sT 192.168.181.0/24 p 3306 >/dev/null oG MySQLscan cat MySQLscan | grep open > MySQLscan2 cat MySQLscan2 When i type this above script in text editor and save as ...
0
votes
0answers
23 views

Stop ISP firewall

I've set up an apache web server with port 80, I can access it very easily within the network by typing the IP x.x.x.x:80 in the browser (I know that I don't need to specify the HTTP port). However, ...
3
votes
0answers
110 views

problem in Nmap while using sudo

Recently I had a problem, each time using sudo for nmap with --spoof-mac gives me an output that the host is down, which actually is not right because I know it is up. Why is that happening? Giving ...
0
votes
1answer
34 views

state of tcp/udp source ports when waiting for answer from target

i have a quick question about tcp port states: suppose i am establishing a tcp connection to a server: source address/port should be 44.44.44.44:33456 destination address/port is 55:55:55.55:443. in ...
0
votes
1answer
123 views

CentOS nmap host discovery scan doesn't work

I have a port forwarded home server running CentOS 7 on my home network. I am trying to fix some issues with it and tried to do an nmap host discovery scan but it doesn't work and says that all hosts ...
0
votes
1answer
52 views

How to search something using a keyword in man command (man nmap)? [closed]

I want to find a specific command in help section e.g I want to know what is the sync command. How do I search in man nmap or nmap -h? I specifically do not want a list of all commands. 2nd quest. I ...
0
votes
1answer
80 views

Passing commands arguments in a variable

So I have this peace of bash code to execute nmap command with different arguments in $line variable When I transform it into an in-line command it works perfectly with separated arguments from $line, ...
0
votes
1answer
449 views

nmap scan for all ports vs scan for single port

I am new to nmap and its usage. I am trying to perform a UDP scan for ports for a local IP address. Approach 1: # sudo nmap -T4 -Pn -sU -p 54 192.a.b.c -vv ... Nmap scan report for 192.a.b.c Host ...
-2
votes
1answer
104 views

Redirect output with nmap [closed]

I have this url www.southernct.edu. Using nmap how can I redirect the output to the file nmap.out nmap www.southernct.edu > nmap.out Would the command above work?
-1
votes
1answer
2k views

nmap doesn't seem to find all open ports

Hi I got a little setup where I have a debian machine running a virtualbox which is also a debian machine. I installed apache on the guest machine and now want so see if my host can find the service, ...
-1
votes
2answers
664 views

nmap output with awk to table

I'm trying to get nmap output as a table or at least straight columns. I'm using this command: $ sudo nmap -sn 192.168.103.0/24 \ | awk '/Nmap scan report for/{printf $5;}/MAC Address:/{print ","...
1
vote
1answer
2k views

How to install zenmap on Fedora

I'm trying to install Zenmap after installing Nmap however it's not quite working. I tried just the regular terminal command dnf install zenmap however it tells me that they're unable to find a match. ...
0
votes
0answers
61 views

How to scan another machine on the local network for open ports when most ports are closed in one's nftables firewall?

I have almost all ports blocked (outbound and inbound) in my nftables firewall in Debian10 - how can I still scan another machine on the same local network for open ports with nmap/zenmap? How are ...
0
votes
1answer
45 views

Why do I not get an ICMP message in responce when doing an UDP scan with nmap?

We had a lab where we scanned a vulnerable system where alot of ports were closed, so it returned alot of ICMP messages as expected and it took a long time. But then I tried to scan my own Debian 10 ...
0
votes
1answer
155 views

How to scan range of tcp and udp ports at a time using nmap?

I tried this command but its not scanning udp ports... nmap --open -p T:22,25,53,80,111,443,465,587,953,993,995,3306,5666,8891,U:53,68,111,323,715 13.235.13.13 What is the correct way for scanning ...
0
votes
1answer
37 views

How to open ports to test nmap script?

I need to test my nmap script, which crashes when many ports are open. So I need a script (python/bash) that opens n ports on a server. How could I do that? Thank you
0
votes
1answer
201 views

assign nmap output to several variables

I am using nmap to scan my network and want to show every device that is up. The following works great: ips=$(nmap -sn 192.168.1.68/24 -oG - | awk '/Up$/{print $2, $3}') What I now want to to is to ...
0
votes
1answer
64 views

How would I go about adding new data to a file?

So! I have an nmap scan that saves the output to a file, nmapscan.txt: sudo nmap -sP 192.168.1* > nmapscan.txt I also have a few other commands to clean up and save all desired output to one file,...
1
vote
2answers
631 views

How to run Bash Script in background [duplicate]

I am remotely connected to a system using ssh and want to run nmap on a system from there. But every 5 minutes, my SSH connection breaks and so the process running on my shell stops. How can I run ...
0
votes
1answer
505 views

I can't access application on azure Ubuntu VM that relies on port 8080, 8000, and 8009. Nmap tells me they are opened

I am using Ubuntu virtual host to run a tomcat based application that uses the ports 8080, 8009, and 8000. The network admin has already opened the ports and when I run nmap on localhost it shows that ...
0
votes
1answer
495 views

Need to determine if firewall is blocking an outbound connection

I don't have direct control over the firewall. I'm trying to troubleshoot a connection to a SFTP site from a Unix machine. Pinging the host results in a timeout, and nmap is telling me the host may be ...
0
votes
1answer
513 views

How can I port scan a host from itself without using the loopback interface?

I'm trying to audit firewall rules on a host. This is typically pretty straightforward to do with nmap or a similar scanning tool. The problem is that I can only run the audit on the host itself. ...
0
votes
1answer
25 views

Multiple tcp scanning tools integration

I recently started my first programming project that consist of purpose multiple tcp scanning tools integration for multiple usage. To be more clear, I want to incorporate NMAP and MASSCAN tools. But, ...