{"id":1467,"date":"2023-10-01T00:00:00","date_gmt":"2023-09-30T22:00:00","guid":{"rendered":"https:\/\/demo.sidekick.be\/itenium\/hacking-tool-nmap\/"},"modified":"2025-11-28T13:31:43","modified_gmt":"2025-11-28T12:31:43","slug":"hacking-tool-nmap","status":"publish","type":"post","link":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/","title":{"rendered":"Hacking Tool: nmap"},"content":{"rendered":"<h1 id=\"what\">What<\/h1>\n<p><a href=\"https:\/\/github.com\/nmap\/nmap\" class=\"github\"><img decoding=\"async\" src=\"https:\/\/img.shields.io\/github\/stars\/nmap\/nmap.svg?style=social&amp;label=Star\" \/><\/a><a href=\"https:\/\/github.com\/nmap\/nmap\">nmap\/nmap<\/a>: Github mirror of official SVN repository.<\/p>\n<p>A CLI tool to discover hosts and services on a computer network by sending packets and analyzing the responses.<\/p>\n<p>If you rather have a GUI, there is <a href=\"https:\/\/nmap.org\/zenmap\/\">zenmap<\/a>.<\/p>\n<h1 id=\"how\">How<\/h1>\n<p>List all bells &amp; whistles:<\/p>\n<pre><code class=\"language-sh\">nmap --help\n<\/code><\/pre>\n<h2 id=\"fast-scan\">Fast Scan<\/h2>\n<p><i class=\"fa fa-hourglass-half\"><\/i> +\/- 10s<\/p>\n<pre><code class=\"language-sh\">nmap -sT -T4 -Pn 10.23.10.2\n<\/code><\/pre>\n<p>This lists all ports that have something running.<br \/> The service name displayed is the default port of a known service for the port but there is no telling if that is actually the case.<\/p>\n<p>Flags used:<\/p>\n<ul>\n<li><code>-sT<\/code>: <a href=\"https:\/\/nmap.org\/book\/man-port-scanning-techniques.html\">Scan Technique<\/a>: TCP connect scan, will show up in server logs.\n<ul>\n<li><code>-sS<\/code>: Quick (thousands\/sec), unobtrusive and stealthy with clear, reliable differentiation between the open, closed, and filtered states. The default and most popular.<\/li>\n<li><code>-sU<\/code>: UDP scans<\/li>\n<\/ul>\n<\/li>\n<li><code>-T&lt;0-5&gt;<\/code>: Set <a href=\"https:\/\/nmap.org\/book\/performance-timing-templates.html\">timing template<\/a> (higher is faster)\n<ul>\n<li>paranoid (0) &amp; sneaky (1): Enable IDS (Intrusion Detection System) evasion<\/li>\n<li>polite (2): Don\u2019t overload to the target machine<\/li>\n<li>normal (3): (default)<\/li>\n<li>aggressive (4): for fast and reliable networks<\/li>\n<li>insane (5): for extraordinarily fast networks<\/li>\n<\/ul>\n<\/li>\n<li><code>-Pn<\/code>: Treat all hosts as online \u2013 skip host discovery<\/li>\n<\/ul>\n<h2 id=\"slow-scan\">Slow Scan<\/h2>\n<p><i class=\"fa fa-hourglass-half\"><\/i> +\/- 10m<\/p>\n<pre><code class=\"language-sh\">nmap -sT -T4 -Pn -sV -O -p- 10.23.10.2\n<\/code><\/pre>\n<p>Flags used:<\/p>\n<ul>\n<li><code>-sV<\/code>: Probe open ports to determine service\/version info<\/li>\n<li><code>-O<\/code>: Enable OS detection<\/li>\n<li><code>-p &lt;port ranges&gt;<\/code>: Only scan specified ports<\/li>\n<\/ul>\n<h2 id=\"docker\">Docker<\/h2>\n<p>There is an Docker image for that\u2026<\/p>\n<pre><code class=\"language-sh\">docker run --rm -it instrumentisto\/nmap -A -T4 scanme.nmap.org\n<\/code><\/pre>\n<p>Flags used:<\/p>\n<ul>\n<li><code>-A<\/code>: Enable OS detection, version detection, script scanning, and traceroute<\/li>\n<\/ul>\n<h1 id=\"when\">When<\/h1>\n<p>At the start of the itenium Security Bootcamp at least one player per team should do an nmap scan to discover services that are not (yet) available directly from the Portal.<\/p>\n<h1>Also in this series<\/h1>\n<ul>\n<li>This Part: Hacking Tool: nmap<\/li>\n<li>Part 2: <a href=\"\/security\/hacking-tool-hydra\/\">Hacking Tool: hydra<\/a><\/li>\n<li>Part 3: <a href=\"\/security\/hacking-tool-sqlmap\/\">Hacking Tool: sqlmap<\/a><\/li>\n<li>Part 4: <a href=\"\/security\/introducing-the-security-bootcamp\/\">The Security Bootcamp<\/a><\/li>\n<li>Part 5: <a href=\"\/security\/security-bootcamp-prep\/\">Security Bootcamp Prep<\/a><\/li>\n<\/ul>\n<h1> Package Versions <i class=\"fa fa-info-circle\" style=\"float: right; color: cornflowerblue; font-size: 28px\" title=\"Package versions used for this post and in the accompanying code on Github\"><\/i><\/h1>\n<p> nmap: v5.2 <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Before Trinity could take down the electric grid, she had to find an attack vector. Her hack started with\u2026 <a href=\"https:\/\/nmap.org\/\">nmap<\/a>!<\/p>\n<p><\/p>\n<figure class=\"youtubemovie\">\n<div class=\"iframewrapper\"><\/div><figcaption>And then used an actual SSH exploit. Nmap can obviously do more than tell you whether SSH is on port 22 \ud83d\ude09<\/figcaption><\/figure>\n","protected":false},"author":1,"featured_media":2019,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[30],"tags":[31,6],"class_list":["post-1467","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-hacking","tag-tutorial"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Hacking Tool: nmap - Itenium<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hacking Tool: nmap - Itenium\" \/>\n<meta property=\"og:description\" content=\"Before Trinity could take down the electric grid, she had to find an attack vector. Her hack started with\u2026 nmap!And then used an actual SSH exploit. Nmap can obviously do more than tell you whether SSH is on port 22 ;)\" \/>\n<meta property=\"og:url\" content=\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/\" \/>\n<meta property=\"og:site_name\" content=\"Itenium\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-30T22:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-28T12:31:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-nmap.png\" \/>\n\t<meta property=\"og:image:width\" content=\"360\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Usdevelop\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Usdevelop\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/\",\"name\":\"Hacking Tool: nmap - Itenium\",\"isPartOf\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-nmap.png\",\"datePublished\":\"2023-09-30T22:00:00+00:00\",\"dateModified\":\"2025-11-28T12:31:43+00:00\",\"author\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022\"},\"breadcrumb\":{\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#primaryimage\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-nmap.png\",\"contentUrl\":\"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-nmap.png\",\"width\":360,\"height\":300,\"caption\":\"Eye with computer design concept on graph in digital environment electronic signaling technology, cad( computer aided design) , neon grids, grid work, luminous 3d objects, in the style of daz3d, 3d illustration, projection, circuit boards, city in eye, clock eye, computer chips, fractal\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/demo.sidekick.be\/itenium\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hacking Tool: nmap\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#website\",\"url\":\"https:\/\/demo.sidekick.be\/itenium\/\",\"name\":\"Itenium\",\"description\":\"We build software. We build careers.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/demo.sidekick.be\/itenium\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022\",\"name\":\"Usdevelop\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g\",\"caption\":\"Usdevelop\"},\"sameAs\":[\"https:\/\/demo.sidekick.be\/itenium\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hacking Tool: nmap - Itenium","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Hacking Tool: nmap - Itenium","og_description":"Before Trinity could take down the electric grid, she had to find an attack vector. Her hack started with\u2026 nmap!And then used an actual SSH exploit. Nmap can obviously do more than tell you whether SSH is on port 22 ;)","og_url":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/","og_site_name":"Itenium","article_published_time":"2023-09-30T22:00:00+00:00","article_modified_time":"2025-11-28T12:31:43+00:00","og_image":[{"width":360,"height":300,"url":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-nmap.png","type":"image\/png"}],"author":"Usdevelop","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Usdevelop","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/","url":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/","name":"Hacking Tool: nmap - Itenium","isPartOf":{"@id":"https:\/\/demo.sidekick.be\/itenium\/#website"},"primaryImageOfPage":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#primaryimage"},"image":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#primaryimage"},"thumbnailUrl":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-nmap.png","datePublished":"2023-09-30T22:00:00+00:00","dateModified":"2025-11-28T12:31:43+00:00","author":{"@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022"},"breadcrumb":{"@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#primaryimage","url":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-nmap.png","contentUrl":"https:\/\/demo.sidekick.be\/itenium\/wp-content\/uploads\/2025\/11\/hacking-nmap.png","width":360,"height":300,"caption":"Eye with computer design concept on graph in digital environment electronic signaling technology, cad( computer aided design) , neon grids, grid work, luminous 3d objects, in the style of daz3d, 3d illustration, projection, circuit boards, city in eye, clock eye, computer chips, fractal"},{"@type":"BreadcrumbList","@id":"https:\/\/demo.sidekick.be\/itenium\/blog\/security\/hacking-tool-nmap\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/demo.sidekick.be\/itenium\/"},{"@type":"ListItem","position":2,"name":"Hacking Tool: nmap"}]},{"@type":"WebSite","@id":"https:\/\/demo.sidekick.be\/itenium\/#website","url":"https:\/\/demo.sidekick.be\/itenium\/","name":"Itenium","description":"We build software. We build careers.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/demo.sidekick.be\/itenium\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/6ab401ce01e858184ee4a8667fe0f022","name":"Usdevelop","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/demo.sidekick.be\/itenium\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc8cf9b9e9d5bbe7e8d247907cc9ac8457bbfa2854b52eaddf6529adfe88ceab?s=96&d=mm&r=g","caption":"Usdevelop"},"sameAs":["https:\/\/demo.sidekick.be\/itenium"]}]}},"_links":{"self":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/comments?post=1467"}],"version-history":[{"count":3,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1467\/revisions"}],"predecessor-version":[{"id":2270,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/posts\/1467\/revisions\/2270"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/media\/2019"}],"wp:attachment":[{"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/media?parent=1467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/categories?post=1467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/demo.sidekick.be\/itenium\/wp-json\/wp\/v2\/tags?post=1467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}