Module 3 – Network scanning. Section 3.4: Nmap network mapper.
Nmap is a security scanner, used to discover hosts and services on a network, thus building a “map” of the network.
Nmap is used in Footprinting, Network Enumeration and network audits.
Nmap – essential toolkit
– Identifying open ports on a target host in preparation for auditing.
– Network inventory, network mapping, maintenance and asset management.
– Finding and exploiting vulnerabilities in a network
Nmap feautes
– Host discovery
– Port scanning
– Version detection of application
– Detecting the operating system
– Scriptable interaction with the target
Vulnerability detection
Nmap GUI
• For Nmap 4.50 and above Zenmap is official GUI and it replaced NmapFE
• Other Nmap web-based interfaces Nmap-CGI, and IVRE.
• NmapWin and NMapW is for Windows
• Xnmap is Mac OS X GUI
Nmap history
• 1997 – Nmap was first published as an article. 1998—Nmap 2.00 is released
• Many versions released since then and Nmap Changelog records all changes
• 2017 – Nmap 7.6 released
• Nmap turns 20 years old on September 1, 2017
Nmap usage
• Nmap tool helps security admins check vulnerabilities and compliance requirements to protect their networks – i.e. white hat hacking.
• Nmap tool could be used for black hat hacking as well.
NMap tools/screen are used in movies
– The Matrix Reloaded, Trinity, The Listening, Battle Royale, Live Free or Die Hard, Bourne Ultimatum, Dredd and Elysium etc.
– Widely used in the video game Hacknet.
Nmap provides four output formats.
• XML output
• Grepable output.
• Normal output.
• Script kiddie : interesting output formatting like – user – us3r and password – passw0rd
Security audit
• Auditing the security of a network.
• Identifying open ports on a target host.
Similar or advanced tools
• Kali linux (BackTrack) https://www.kali.org/
• Metasploit Framework https://www.metasploit.com/
• Wireshark https://www.wireshark.org/
• Nessus VA scanner https://www.tenable.com/
• BackBox https://backbox.org/
• OpenVAS http://www.openvas.org/
• Kismet http://www.kismetwireless.net/
• Aircrack-ng http://www.aircrack-ng.org/
Zenmap is the official Nmap Security Scanner GUI.
It is a multi-platform (Linux, Windows, Mac OS X, BSD, etc.) free and open source application which aims to make working with Nmap easy and provides advanced features for experienced Nmap users.
– https://nmap.org/zenmap/
source
