NMap - Cheatsheet

nmap-cheatsheet.md

1. Nmap Basic Scanning

nmap -sV [host] // Version Detection, default scan nmap -sS [host] // SYN Stealth Scan nmap -sU [host] // UDP Scan nmap -sT [host] // TCP Connect() Scan nmap -sN [host] // TCP Null Scan nmap -sF [host] // TCP FIN Scan

2. Nmap Host Discovery

nmap -sL [host/network] // List Scan - Discover targets by querying DNS or the targets in a network nmap -sn [host/network] // Ping Scan - Determine if hosts are alive nmap -Pn [host/network] // Skip host discovery

3. Nmap Port Scanning

nmap -sC [host] // Script Scan - Execute default nmap scripts nmap -p [ports] [host] // Scan specific ports nmap -F [host] // Fast Scan - Scan for the most commonly used ports

4. Nmap Advertising Scanning

nmap -oA [filename] [host] // Output scan in all formats nmap -O [host] // Probe Operating System fingerprints nmap [host] --traceroute // Trace host hops

5. Nmap Version Detection

nmap -sV [host] // Show versions of services and OS nmap -A [host] // Advanced Scan - OS and service version and script scanning

6. Nmap Timing Options

nmap -T[0-5] [host] // Timing for scans

7. Nmap Firewall/IDS Evasion

nmap --spoof-mac [address] // Changes source MAC address nmap -D RND:10 [host] // Decoy Scan - Appear to scan from multiple hosts nmap -f // Fragmented Packets - Fragment Packets nmap -Pn [host] // Skip host discovery nmap --data-length [length] // Append random data to packet

Using NMAP also we can run particular inbuilt script to exploit particular vulnerability.

nmap --script [name] [host] // Execute a custom script

Source : https://www.linkedin.com/posts/mohiuddin7_nmap-cheat-sheet-1-nmap-basic-scanning-activity-7047959519380836352-P18n?utm_source=share&utm_medium=member_desktop