Security & Recon

🛡️ Nmap & Penetration Testing Master Reference

Nmap (Network Mapper) is an open-source security tool used for network discovery, port auditing, vulnerability assessment, and OS fingerprinting.

1. Essential Host & Service Discovery Scans

# Basic Service Versioning & Default Script Scan
nmap -sC -sV -oA nmap/initial 10.10.10.192

# Fast Full TCP Port Scan (All 65,535 Ports)
nmap -p- -T4 --min-rate 5000 10.10.10.192

# UDP Scan for DNS, SNMP, and NTP
sudo nmap -sU --top-ports 20 10.10.10.192

2. Nmap Scripting Engine (NSE) Categories

# Run Vulnerability Audit Scripts
nmap --script vuln 10.10.10.192

# HTTP Title & Enumeration
nmap --script http-enum,http-title -p 80,443 10.10.10.192

# SMB Shares & User Enumeration
nmap --script smb-enum-shares,smb-enum-users -p 445 10.10.10.192

3. Firewall & IDS Evasion Flags

# Fragment Packets to Bypass Simple Inspection
nmap -f 10.10.10.192

# Decoy Scan (Spoof Source Addresses)
nmap -D RND:10 10.10.10.192