Kali Linux 2018: Assuring Security by Penetration Testing - Fourth Edition

The network mapper (Nmap)

Nmap is the top dog in port scanning and enumeration. Covering all options and modules of Nmap in this guide is outside the scope of this book; instead, we will cover the scans that I mostly use when testing. But first, here's some info on port states:

• Open: An application on the target machine is listening for connections/packets on that port
• Closed: Ports have no application listening on them, though they could open up at any time
• Filtered: A firewall, filter, or other network obstacle is blocking the port so that Nmap cannot tell whether it is open or closed

The following are the Nmap options available:

• O: OS detection
• p: Port scan
• p-: Scan all ports (1-65535)
• p 80,443: Scan port 80 and 443
• p 22-1024: Scan ...