View source for Nmap

[[Category:Tools]]
<section begin="Options"></section>
=Notes=
Convert xml scans to html files
<code>xsltproc target.xml -o target.html</code>
[[File:Nmap Scan.png|thumb]]
=Scanning Options=
{|
! width="5%" |'''Nmap Option'''
! width="6%" |'''Description'''
|-
|<code>10.10.10.0/24</code>
|Target network range.
|-
|<code>-sn</code>
|Disables port scanning.
|-
|<code>-Pn</code>
|Disables ICMP Echo Requests
|-
|<code>-n</code>
|Disables DNS Resolution.
|-
|<code>-PE</code>
|Performs the ping scan by using ICMP Echo Requests against the target.
|-
|<code>--packet-trace</code>
|Shows all packets sent and received.
|-
|<code>--reason</code>
|Displays the reason for a specific result.
|-
|<code>--disable-arp-ping</code>
|Disables ARP Ping Requests.
|-
|<code>--top-ports=&lt;num&gt;</code>
|Scans the specified top ports that have been defined as most frequent.
|-
|<code>-p-</code>
|Scan all ports.
|-
|<code>-p22-110</code>
|Scan all ports between 22 and 110.
|-
|<code>-p22,25</code>
|Scans only the specified ports 22 and 25.
|-
|<code>-F</code>
|Scans top 100 ports.
|-
|<code>-sS</code>
|Performs an TCP SYN-Scan.
|-
|<code>-sA</code>
|Performs an TCP ACK-Scan.
|-
|<code>-sU</code>
|Performs an UDP Scan.
|-
|<code>-sV</code>
|Scans the discovered services for their versions.
|-
|<code>-sC</code>
|Perform a Script Scan with scripts that are categorized as &quot;default&quot;.
|-
|<code>--script &lt;script&gt;</code>
|Performs a Script Scan by using the specified scripts.
|-
|<code>-O</code>
|Performs an OS Detection Scan to determine the OS of the target.
|-
|<code>-A</code>
|Performs OS Detection, Service Detection, and traceroute scans.
|-
|<code>-D RND:5</code>
|Sets the number of random Decoys that will be used to scan the target.
|-
|<code>-e</code>
|Specifies the network interface that is used for the scan.
|-
|<code>-S 10.10.10.200</code>
|Specifies the source IP address for the scan.
|-
|<code>-g</code>
|Specifies the source port for the scan.
|-
|<code>--dns-server &lt;ns&gt;</code>
|DNS resolution is performed by using a specified name server.
|}
<section end="Options" />
<section begin="Output" />
=Output Options=

{|
! width="5%" |'''Nmap Option'''
! width="6%" |'''Description'''
|-
|<code>-oA filename</code>
|Stores the results in all available formats starting with the name of &quot;filename&quot;.
|-
|<code>-oN filename</code>
|Stores the results in normal format with the name &quot;filename&quot;.
|-
|<code>-oG filename</code>
|Stores the results in &quot;grepable&quot; format with the name of &quot;filename&quot;.
|-
|<code>-oX filename</code>
|Stores the results in XML format with the name of &quot;filename&quot;.
|}
<section end="Output" />
<section begin="Performance" />
==Performance Options==

{|
! width="5%" |'''Nmap Option'''
! width="6%" |'''Description'''
|-
|<code>--max-retries &lt;num&gt;</code>
|Sets the number of retries for scans of specific ports.
|-
|<code>--stats-every=5s</code>
|Displays scan's status every 5 seconds.
|-
|<code>-v/-vv</code>
|Displays verbose output during the scan.
|-
|<code>--initial-rtt-timeout 50ms</code>
|Sets the specified time value as initial RTT timeout.
|-
|<code>--max-rtt-timeout 100ms</code>
|Sets the specified time value as maximum RTT timeout.
|-
|<code>--min-rate 300</code>
|Sets the number of packets that will be sent simultaneously.
|-
|<code>-T &lt;0-5&gt;</code>
|Specifies the specific timing template.
|}
<section end="Performance" />