Practical Security Automation and Testing

Nmap usage tips

Nmap usage tips. To improve the scanning accuracy, here are some of the recommendations for the Nmap command execution:

• When the result is no-response, it may happen under the heavy load or high-delay network environment. If you are sure a specific port is listening but the result returns no-response. It's suggested to add the delay time by using -scan_delay <time>.
• If the scanning result is open|filtered, it can be concluded that the port is open or closed. It only means there may be proxy or firewall in between the target scan port.
• Nmap can be extended by using Nmap Scripting Engine (NSE) to do other security testing, such as SSL checks, XXS, and even SQL injection scans.

Nmap can also be extended to do CVE vulnerability ...