Basic NMAP Commands

Question 1

How do you conduct a basic NMAP scan of 8.8.8.8?

Answer 1

nmap 8.8.8.8

Question 1

What nmap command should you use to scan port 80 of a target?

Answer 1

nmap -p <Port#> <Target> (Ex: nmap -p 80 10.10.1.50)</Target>

Question 2

What command allows you to conduct a basic ping scan of a subnet?

Answer 2

nmap -sp <Target> (Ex: 192.168.20.0/24)</Target>

Question 3

What command do you use to scan a port range of a target?

Answer 3

nmap -p <Port> <Target> (Ex: nmap -p 1-65535</Target></Port>

Question 4

What command can you use to scan multiple IP address?

Answer 4

nmap <Target 1> <Target 2> (Ex: nmap 10.10.1.50 192.168.1.60)

Question 5

You need to conduct a basic scan of a small subnet range, what command would you use?

Answer 5

nmap X.X.X.X-X (Ex: nmap 10.10.1.5-15)

Question 6

What command can you use to scan a targets OS and Services?

Answer 6

nmap -A X.X.X.X (Ex: nmap -A 10.10.1.5)

Question 7

How do you detect a targets services in NMAP?

Answer 7

nmap -sV X.X.X.X (Ex: nmap -sV 10.10.10.5)

Question 8

How do you run a TCP scan in NMAP?

Answer 8

nmap -sT X.X.X.X (Ex: nmap -sT 192.168.1.88)

Question 9

How do you run a UDP scan in NMAP?

Answer 9

nmap -sU X.X.X.X (Ex: nmap -sU 192.168.40.11)

Question 10

How do you conduct a TCP SYN(Stealth) scan?

Answer 10

nmap -sS X.X.X.X (Ex: nmap -sS 192.168.3.78)

Question 11

What command do you use to scan for the targets OS?

Answer 11

nmap 192.168.1.22 -O