NMAP FOR RECONNAISSANCE #2

                             Hello this is virtual . In the last tutorial I taught you the basic uses of Nmap . This is a continuation of the previous post concentrating on some advanced uses of Nmap .

 

1.Zenmap : This is a GUI of Nmap . To access it type ' zenmap ' in the Terminal [in root] . It is much easy for beginners and is interactive .

2.Scan for an entire subnet : 

Let me give an example.If you want to scan for entire Class C subnet with port 80 open type

            nmap  <ip>/24 -p 80 

Eg. nmap 192.168.0.1/24 -p 80

 

 

3.Evading Intrusion Detection System : Most commercial servers have Intrusion Detecting System which alerts the system administrator in case of malicious activity . The best way to evade them is to slow down the speed to sneaky speed setting of Nmap.

Eg. nmap -sS -T2 192.168.0.3

-T2 instructs Nmap to use sneaky speed setting.

[The scan will take more time than original { without -T2} ] 

You can clearly see how much time the scan took!!!

4.Decoy Scan : While scanning somebody's machine we always want to hide our ip. Nmap allows us to use decoy ip address so that it appears that many ip addresses are scanning the machine.

Eg. nmap -sT 192.168.0.2 -D 10.0.0.1,10.0.0.2,10.0.0.3

 

5.Scan for UDP ports : The previous scan types like -sS or -sT doesn't detect 

UDP ports . To check for UDP ports type 

                 nmap -sU [ip here]

Eg. nmap -sU 192.168.0.2

 

 

In the previous scan you will see that some ports are open|filtered . Use ' -reason'  switch to know why nmap has placed that particular port in that particular state.  

 

This is all for today .Next day ,I will come up with more awesome hacks and tutorials , especially in nmap scripts . So follow this blog for more awesome tutorials . Leave behind comments if you have any problem.