joemccray

nmap scans

Nov 24th, 2018 (edited)
1,116
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.79 KB | None | 0 0
  1. ########################
  2. # Scanning Methodology #
  3. ########################
  4.  
  5. - Ping Sweep
  6. What's alive?
  7. The goal of this step is to discover what hosts are reachable on the network (aka: What's alive)
  8. ------------
  9.  
  10. ---------------------------Type This-----------------------------------
  11. sudo nmap -sP 157.166.226.*
  12. -----------------------------------------------------------------------
  13.  
  14.  
  15.  
  16. -if -SP yields no results try:
  17. ---------------------------Type This-----------------------------------
  18. sudo nmap -sL 157.166.226.*
  19. -----------------------------------------------------------------------
  20.  
  21.  
  22.  
  23. -Look for hostnames:
  24. ---------------------------Type This-----------------------------------
  25. sudo nmap -sL 157.166.226.* | grep com
  26. -----------------------------------------------------------------------
  27.  
  28.  
  29.  
  30. - Port Scan
  31. What's where?
  32. ------------
  33. The goal of this step is to discover what services are running on the hosts that you previously discovered
  34. ---------------------------Type This-----------------------------------
  35. sudo nmap -sS -p21,22,25,53,80,110,143,443,993,995,3306 165.245.227.238
  36. -----------------------------------------------------------------------
  37.  
  38.  
  39.  
  40. - Bannergrab/Version Query
  41. What versions of software are running
  42. -------------------------------------
  43. The goal of this step is to discover the versions of the services are running on the hosts that you previously discovered
  44.  
  45. ---------------------------Type This-----------------------------------
  46. sudo nmap -sV -p21,22,25,53,80,110,143,443,993,995,3306 165.245.227.238
  47. -----------------------------------------------------------------------
  48.  
  49.  
  50.  
  51.  
  52. - Vulnerability Research
  53. Lookup the banner versions for public exploits
  54. ----------------------------------------------
  55. http://exploit-db.com
  56.  
Advertisement
Add Comment
Please, Sign In to add comment