Network Security Lab: What Is Nmap?
Network Security Lab: What Is Nmap?
DEEPANSHU SHARMA
What is Nmap?
NMAP short for Network Mapper, is a network discovery and security auditing tool. It is
known for its simple and easy to remember flags that provide powerful scanning options.
Task 1
Ping to the website to check whether it is up or down. We also find the IP address of the
website
Nmap (ip address) provides the list of open ports
Scanning
to can scan a range of IP address too:
nmap 192.168.1.1-20
nmap 192.168.1.0/24
TCP SYN (Stealth) Scan (-sS)
This is a form of TCP scan where nmap itself crafts a syn packet, which is the first
packet that is sent to establish a TCP connection. What is important to note here is
that the connection is never formed, rather the responses to these specially crafted
packets are analyzed by Nmap to produce scan results.
T0 T1 T2 T3 T4 T5
Name Paranoid Sneaky Polite Normal Aggressive Insane
-A: Enables OS detection, version detection, script scanning, and traceroute
Tracerouting as its name says consists in gathering information on the intermediating routers through
which the traffic pass from a point to another.
nmap -sn -Pn –traceroute nmap.org
the option -sn instructs Nmap to omit the default port scan
the option or flag -Pn instructs Nmap to avoid the host discovery since we know the host is alive
QUESTIONS
1. What is the full command you used to run the port scan (including arguments)?
A 45.33.32.156
3. What ports are open on the target server? What applications are runningon those ports?
9929 is open
31337 is open