NMAP ADVANCED SCAN COMMANDS ‎

👁️NMAP ADVANCED SCAN COMMANDS 👁️

♓Service and OS Detection♓

Detect OS and Services :

    nmap -A 192.168.1.1

Standard service detection

   nmap -sV 192.168.1.1

More aggressive Service Detection

   nmap -sV --version-intensity 5 192.168.1.1

Lighter banner grabbing detection 

  nmap -sV --version-intensity 0 192.168.1.1

♓Digging deeper with NSE Scripts♓

Scan using default safe scripts 

   nmap -sV -sC 192.168.1.1

Get help for a script :

 nmap --script-help=ssl-heartbleed

Scan using a specific NSE script :

  nmap -sV -p 443 –script=ssl-heartbleed.nse 192.168.1.1

Scan with a set of scripts :

   nmap -sV --script=smb* 192.168.1.1

♓IP Address information♓

Find Information about IP address :

    nmap--script=asn-query,whois,ip-geolocation-maxmind 192.168.1.0/24

♓HTTP Service Information♓

Gather page titles from HTTP services :

  nmap --script=http-title 192.168.1.0/24

Get HTTP headers of web services :

 nmap --script=http-headers 192.168.1.0/24

Find web apps from known paths :

   nmap --script=http-enum 192.168.1.0/24