NMAP Quick Reference

29th September 2017

Introduction

NMAP is a tool for network discovery and auditing. This is not a comprehensive tutorial, only a quick reference source. Consult the man pages and/or documentation for indepth explanation of commands.

Port Scan

Top Ports

Scan the top N number of ports

cmd 

nmap --top-ports 10 www.google.com

UDP Scan

UDP scans require sudo privilege

cmd 

sudo nmap -sU -p 53 8.8.8.8

Ping Sweep

Subnet

Ping sweep a subnet

cmd 

nmap -sP 10.1.1.0/24

NPing

NPing allows you to generate packets.

Gratuitous ARP

Target a host with a GARP reply

cmd 

sudo nping -c 1 --arp-sender-mac 08:00:27:ba:6c:7f \
                --arp-sender-ip 10.1.1.1 --arp-type ar \
                --arp-target-mac 08:00:27:74:99:3b 10.1.1.11 \
                --interface eth1 --dest-mac 08:00:27:74:99:3b

nmap networking