API tools faq
paste
unhappyghost

‪#‎Security_Audit‬ with ‪#‎Nmap‬ - commands List

unhappyghost
Jul 23rd, 2013
286
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.01 KB | None | 0 0
raw download clone embed print report
  1. ‪#‎Security_Audit‬ with ‪#‎Nmap‬ - commands List
  2. -------------------------------------------------
  3.  
  4. Here are some nmap commands that will help for ‪#‎VAPT‬ ‪#‎Vulnerability_Assessment‬ ‪#‎Penetration_Testing‬
  5.  
  6. Basic ‪#‎Scanning_Techniques‬
  7. ---------------------------
  8. Scan a single target —> nmap [target]
  9. Scan multiple targets —> nmap [target1,target2,etc]
  10. Scan a list of targets —-> nmap -iL [list.txt]
  11. Scan a range of hosts —-> nmap [range of IP addresses]
  12. Scan an entire subnet —-> nmap [IP address/cdir]
  13. Scan random hosts —-> nmap -iR [number]
  14. Excluding targets from a scan —> nmap [targets] –exclude [targets]
  15. Excluding targets using a list —> nmap [targets] –excludefile [list.txt]
  16. Perform an aggressive scan —> nmap -A [target]
  17. Scan an IPv6 target —> nmap -6 [target]
  18.  
  19. Discovery Options
  20. ---------------------
  21. Perform a ‪#‎ping_scan‬ only —> nmap -sP [target]
  22. Don’t ‪#‎ping‬ —> nmap -PN [target]
  23. ‪#‎TCP_SYN‬ Ping —> nmap -PS [target]
  24. ‪#‎TCP_ACK‬ ping —-> nmap -PA [target]
  25. ‪#‎UDP‬ ping —-> nmap -PU [target]
  26. ‪#‎SCTP‬ Init Ping —> nmap -PY [target]
  27. ‪#‎ICMP_echo‬ ping —-> nmap -PE [target]
  28. ‪#‎ICMP_Timestamp‬ ping —> nmap -PP [target]
  29. ‪#‎ICMP_address_mask‬ ping —> nmap -PM [target]
  30. ‪#‎IP_protocol‬ ping —-> nmap -PO [target]
  31. ‪#‎ARP‬ ping —> nmap -PR [target]
  32. ‪#‎Traceroute‬ —> nmap –traceroute [target]
  33. Force ‪#‎reverse_DNS‬ resolution —> nmap -R [target]
  34. Disable reverse DNS resolution —> nmap -n [target]
  35. Alternative ‪#‎DNS_lookup‬ —> nmap –system-dns [target]
  36. Manually specify DNS servers —> nmap –dns-servers [servers] [target]
  37. Create a host list —-> nmap -sL [targets]
  38.  
  39. ‪#‎Advanced_Scanning‬ Options
  40. -------------------------------
  41. TCP SYN Scan —> nmap -sS [target]
  42. ‪#‎TCP_connect‬ scan —-> nmap -sT [target]
  43. ‪#‎UDP_scan‬ —-> nmap -sU [target]
  44. ‪#‎TCP_Null_scan‬ —-> nmap -sN [target]
  45. ‪#‎TCP_Fin_scan‬ —> nmap -sF [target]
  46. ‪#‎Xmas_scan‬ —-> nmap -sX [target]
  47. TCP ACK scan —> nmap -sA [target]
  48. Custom TCP scan —-> nmap –scanflags [flags] [target]
  49. IP protocol scan —-> nmap -sO [target]
  50. Send Raw Ethernet packets —-> nmap –send-eth [target]
  51. Send IP packets —-> nmap –send-ip [target]
  52.  
  53. ‪#‎Port_Scanning‬ Options
  54. -----------------------
  55. Perform a fast scan —> nmap -F [target]
  56. Scan specific ports —-> nmap -p [ports] [target]
  57. Scan ports by name —-> nmap -p [port name] [target]
  58. Scan ports by protocol —-> nmap -sU -sT -p U:[ports],T:[ports] [target]
  59. Scan all ports —-> nmap -p “*” [target]
  60. Scan top ports —–> nmap –top-ports [number] [target]
  61. Perform a sequential port scan —-> nmap -r [target]
  62.  
  63. Version Detection
  64. --------------------
  65. ‪#‎Operating_system‬ detection —-> nmap -O [target]
  66. Submit TCP/IP Fingerprints —-> www.nmap.org/submit/
  67. Attempt to guess an unknown —-> nmap -O –osscan-guess [target]
  68. Service version detection —-> nmap -sV [target]
  69. Troubleshooting version scans —-> nmap -sV –version-trace [target]
  70. Perform a ‪#‎RPC‬ scan —-> nmap -sR [target]
  71.  
  72. Timing Options
  73. -----------------
  74. Timing Templates —-> nmap -T [0-5] [target]
  75. Set the packet TTL —-> nmap –ttl [time] [target]
  76. Minimum of parallel connections —-> nmap –min-parallelism [number] [target]
  77. Maximum of parallel connection —-> nmap –max-parallelism [number] [target]
  78. Minimum host group size —–> nmap –min-hostgroup [number] [targets]
  79. Maximum host group size —-> nmap –max-hostgroup [number] [targets]
  80. Maximum RTT timeout —–> nmap –initial-rtt-timeout [time] [target]
  81. Initial RTT timeout —-> nmap –max-rtt-timeout [TTL] [target]
  82. Maximum retries —-> nmap –max-retries [number] [target]
  83. Host timeout —-> nmap –host-timeout [time] [target]
  84. Minimum Scan delay —-> nmap –scan-delay [time] [target]
  85. Maximum scan delay —-> nmap –max-scan-delay [time] [target]
  86. Minimum packet rate —-> nmap –min-rate [number] [target]
  87. Maximum packet rate —-> nmap –max-rate [number] [target]
  88. Defeat reset rate limits —-> nmap –defeat-rst-ratelimit [target]
  89.  
  90. ‪#‎Firewall_Evasion‬ Techniques
  91. -----------------------------
  92. #Fragment_packets —-> nmap -f [target]
  93. Specify a specific #MTU —-> nmap –mtu [MTU] [target]
  94. Use a decoy —-> nmap -D RND: [number] [target]
  95. Idle #zombie scan —> nmap -sI [zombie] [target]
  96. Manually specify a source port —-> nmap –source-port [port] [target]
  97. Append random data —-> nmap –data-length [size] [target]
  98. Randomize target scan order —-> nmap –randomize-hosts [target]
  99. #Spoof #MAC_Address —-> nmap –spoof-mac [MAC|0|vendor] [target]
  100. Send bad #checksums —-> nmap –badsum [target]
  101.  
  102. Output Options
  103. -----------------
  104. Save output to a text file —-> nmap -oN [scan.txt] [target]
  105. Save output to a #xml file —> nmap -oX [scan.xml] [target]
  106. Grepable output —-> nmap -oG [scan.txt] [target]
  107. Output all supported file types —-> nmap -oA [path/filename] [target]
  108. Periodically display statistics —-> nmap –stats-every [time] [target]
  109. 133t output —-> nmap -oS [scan.txt] [target]
  110.  
  111. Troubleshooting and debugging
  112. -------------------------------
  113. Help —> nmap -h
  114. Display Nmap version —-> nmap -V
  115. Verbose output —-> nmap -v [target]
  116. Debugging —-> nmap -d [target]
  117. Display port state reason —-> nmap –reason [target]
  118. Only display open ports —-> nmap –open [target]
  119. Trace packets —> nmap –packet-trace [target]
  120. Display host networking —> nmap –iflist
  121. Specify a network interface —> nmap -e [interface] [target]
  122.  
  123. Nmap #Scripting Engine
  124. -------------------------
  125. Execute individual scripts —> nmap –script [script.nse] [target]
  126. Execute multiple scripts —-> nmap –script [expression] [target]
  127. Script categories —-> all, #auth, default, discovery, external, #intrusive, #malware, safe, vuln
  128. Execute scripts by category —-> nmap –script [category] [target]
  129. Execute multiple scripts categories —-> nmap –script [category1,category2, etc]
  130. Troubleshoot scripts —-> nmap –script [script] –script-trace [target]
  131. Update the script database —-> nmap –script-updatedb
  132.  
  133. For more follow http://nmap.org/book/man.html
  134. #UnhappyGhost
  135.  
  136. .
  137.  
  138. ##############################################################
  139. # ṲИℋÅℙℙУḠ♓☮$✝ #
  140. ##############################################################
  141. || Website --------> http://unhappyghost.com/ ||
  142. || Facebook -------> https://www.facebook.com/unhappygh0st ||
  143. || FB Page --------> https://www.facebook.com/geeksch00l ||
  144. || Twitter --------> https://twitter.com/unhappygh0st ||
  145. || Google+ --------> http://goo.gl/WCHeJR ||
  146. || Youtube --------> http://goo.gl/A3mQIE ||
  147. || IPv6 Vids ------> http://goo.gl/Rbcxk ||
  148. || IPv6 Event -----> http://goo.gl/TaeXv ||
  149. ##############################################################
  150.  
  151. .
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!