Questions tagged [nmap]

a free and open-source port scanner, operating system fingerprinter, and service fingerprinter

36 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
1answer
344 views

Why Nmap fragmented scan on Linux is only working from virtual environment?

OLD QUESTION AND TITLE (Look further down for the updated question): Why Nmap fragmented scan is only working on Backtrack? I spent quite a few hours today trying to capture and study some ...
3
votes
0answers
124 views

Tips for Troubleshooting Remote IMAP/SMTP Host Connection with OPENSSL and NMAP

I work in tech support for a company that has an email inbox integration. Users can input IMAP and SMTP host names and ports and we will attempt to open a connection with those ports and host names so ...
3
votes
0answers
351 views

Why nmap is slow with Debian stretch/testing with Broadcom BCM5708?

I had freshly installed Debian testing for a HP G5 server with Broadcom BCM5708 network card. Nmap scans are about 10 times slower that running on another HP G5 server with different network card. I ...
3
votes
1answer
264 views

Difference between ssl/https and plain https in nmap output

I'm trying to analyze the behavior of an IP that works as free WiFi access point. nmap with parameter (-sV) reports the following for two different measurements: PORT STATE SERVICE VERSION 443/tcp ...
3
votes
0answers
737 views

Why doesn't ufw enforce firewall rules for traffic coming from Virtualbox VM

I've been running Linux Mint 17 on my laptop for a while and thought I had it locked down to not allow any incoming traffic through "Firewall Configuration" (ufw GUI)—I have also validated this from ...
2
votes
3answers
263 views

How to SSH into Raspberry Pi connected via Ethernet on CentOS7?

I am trying to SSH into my Raspberry Pi 3 Model B V1.2 from my laptop running CentOS7. I have connected them together via Ethernet cable but the laptop is unable to identify Raspi. So i tried running ...
2
votes
0answers
522 views

Why doesn't netstat show me some ports?

When port-scanning my computer with another machine, I find three open ports: Starting Nmap 7.40 ( https://nmap.org ) at 2017-05-08 22:14 CEST Nmap scan report for laptop.local (192.168.11.103) Host ...
2
votes
0answers
482 views

Port 443 switching to filtered after openssl test

While I was investigating this issue related to SSL (published as OT in StackOverflow), I found a curious behaviour. Premise The premise is that I was trying to understand why my web server (hosted ...
2
votes
0answers
351 views

why does nmap shows same ports sometimes as filtered and sometimes as closed?

When I'm scanning port range 4050-4060 of an smart metering device all ports are reported as closed: root@abc:~/rvm/dlms# nmap -p 4050-4060 192.168.1.242 Starting Nmap 6.47 ( http://nmap.org ) at ...
2
votes
1answer
1k views

nmap won't recognize a hostname on my local area network

Scanning the machine on the LAN with my laptop, I got this: gabriele @ osiris { ~ } [ Tue Oct 07 ] [ 08:49 PM] nmap -sP 192.168.1.236 Starting Nmap 6.40 ( http://nmap.org ) at 2014-10-07 20:50 CEST ...
1
vote
0answers
410 views

Shell command on terminal vs system() call

I am using NMAP for port scanning on a host. When I run the following command on terminal, it gives the results within a minute most of the times. $ nmap -p 1-65535 10.180.5.237 | awk --posix '{ ...
1
vote
0answers
638 views

Apt-Get unable to locate package

I'm trying to install nmap on my linux OS which is version 4.4.0-83-generic GNU/Linux. At first I instinctively ran: sudo apt-get install nmap And this is the output from that command: Reading ...
1
vote
3answers
383 views

How to format output from nmap in a specific predefined format

Assume I am executing nmap shell to find out a simple output.We are all familiar with this one: Starting Nmap 6.47 ( http://nmap.org ) at.... Nmap scan report for www.google.com (172.217.26.68) Host ...
1
vote
0answers
550 views

How to generate a nmap HTML report with python?

Given an .xml output file from a nmap scan, how would you suggest to generate an html report from this file? nmap proposes the following utility with shell (reference): xsltproc xsltproc <nmap-...
1
vote
0answers
891 views

Issues with nmap scan using ssh socks proxy with proxychains

I have a socks proxy made available to a remote computer, using ssh: ssh -D 127.0.0.1:9999 remoteuser@remotemachine I've adjusted the /etc/proxychains.conf: quiet_mode socks4 127.0.0.1 9999 After ...
1
vote
1answer
350 views

Configure masscan to leave user agent in server logs

I'm trying to configure the nmap-like program masscan to leave a useragent (and all the other usual info that comes along with the useragent, but the useragent is what I'm most concerned with) in the ...
1
vote
2answers
716 views

nmap socket trouble

I've been trying to use nmap but it fails with the following output: Starting Nmap 6.47 ( http://nmap.org ) at 2016-06-21 22:24 PDT NSOCK ERROR [0.3460s] nsock_make_socket(): Socket trouble: Address ...
1
vote
1answer
3k views

How to proxy nmap and dns resolution of nmap

How to use nmap and dns resolution of nmap over proxy? I tried proxychains, but for dns resolution it doesn't work, it's known bug as I read on some forums. It works well without dns_proxy feature in ...
1
vote
2answers
7k views

How to “open” on a “filtered” port

I am running: $ ssh user@ip_address and waiting for long time without response. I try to verify the status of my port: $ a=`nmap ip_address -PN -p ssh | grep filtered` $ echo $a 22/tcp ...
1
vote
1answer
509 views

masscan. how to configure Linux?

I've set this in my sysctl.conf: net.netfilter.nf_conntrack_max=268435456 Because, this border 16,777,216 achieved very quick. Also, I've decrease timeouts: net.ipv4.tcp_fin_timeout = 30 net....
1
vote
0answers
2k views

Postgresql 9.1 - Kali Linux

I started to read this book : http://www.amazon.fr/Metasploit-The-Penetration-Testers-Guide/dp/159327288X And I have some trouble with postgresql 9.1 (in Kali Linux). When I start msfconsole, I ...
1
vote
0answers
1k views

How to see interactive output when running nmap from a bash script?

I'm trying to run nmap from a Bash script, in a way so that when Enter is pressed it should give some output, as happens when running directly from the commandline. When calling a few different nmap ...
1
vote
0answers
2k views

Using nmap's sql-injection script to scan a specific web folder

I'm fairly new to linux and nmap. I'm using debian squeeze. I tried installing an SQL-injection script for nmap. I was able to successfully run a test scan agains my web server running Windows. ...
1
vote
1answer
67 views

How to run nmap from inside a chroot?

While I am trying to run nmap with privilege this message is showing: nmap: netutil.cc:3285: int route_dst_netlink(const sockaddr_storage*, route_nfo*, const char*, const sockaddr_storage*): ...
0
votes
1answer
56 views

Find IP address of poe devices attached to my computer via ethernet

I'm currently trying to setup zoneminder on my computer that has Ubuntu as a host OS. Before I do all that, I want to know if the poe CCTV camera I purchased works, a Reolink RLC410-5MP There are ...
0
votes
0answers
35 views

filtering nmap script scan and outputting ip:port format

I'm grepping for anything that contains ssl-cert, this is so I can get the IP and ports for any certificates in use. Also I'm grepping 11 lines above the "ssl-cert" which gives me this output( the ...
0
votes
0answers
45 views

Issues with IPv6 and Apache2

So I'm trying to set up an Ubuntu server with the web application running on IPv6 using an Internal adapter. I honestly do not know what the issue is. I've tried changing the adapter that is hosting ...
0
votes
1answer
366 views

Ports not really open after firewalld command

OS: CentOS 7 This is a question that is bordering on two issues. I have a docker machine running where I recently installed the PLEX container from linuxserver/plex. The current problem is that I ...
0
votes
1answer
60 views

Scan network with Linux kernel command

Does Linux kernel provide some utility familiar to nmap for simple network scanning to discover attached nodes?
0
votes
1answer
73 views

Filtering nmap scan and outputting ip:port format

Host: 1.1.1.1 () Ports: 8080/open/tcp//http-proxy/// Ignored State: filtered (28) Host: 2.2.2.2 () Ports: 8888/open/tcp//sun-answerbook/// Ignored State: closed (28) Host: 3.3.3.3 () Ports: 1263/...
0
votes
2answers
51 views

How to specify nmap to add redirect address?

I'm trying to ping the health of VM's using nmap utility. # nmap -v -n -sP 192.168.102.116 Host 192.168.102.116 appears to be down. Note: Host seems down. If it is really up, but blocking our ping ...
0
votes
1answer
72 views

nmap show me differert result on the same machine

when i use nmap without sudo it show me the ports are open as nmap 192.168.1.5 Host is up (0.00091s latency). Not shown: 995 filtered ports PORT STATE SERVICE 80/tcp open http 110/tcp open ...
0
votes
1answer
76 views

Value of nmap option

I've found in some docs of port knocking, that it is used the option --host-timeout I don't understand why is 201 assigned to it? e.g.: nmap -Pn --host-timeout 201 --max-retries 0 -p 7000 192.168.80....
0
votes
1answer
771 views

Knowing the service that opens the port

I want to close unnecessary ports in debian 8.2. $ nmap localhost | grep open 25/tcp open smtp 631/tcp open ipp Searching the service that corresponds to smtp, $ lsof -i:25 $ sudo systemctl --...
-1
votes
1answer
30 views

How can fragment packets -f/--mtu be usefull?

How can fragment packets -f/--mtu be usefull ? That is, say from a normal scan I get for a given IP and port range: 28/tcp filtered unknown no-response 29/tcp filtered msg-icp no-response 30/tcp ...
-1
votes
1answer
344 views

Network Traffic Analyser using Shell Script

Is there any way or script that could ping and fetch the ttl simultaneously and store in two columns in a text file for a set of IP addresses that are alive on network- I wish to make a shell script ...