Nmap Cookbook

Nmap® Cookbook The fat-free guide to network scanning

2

Nmap® Cookbook The Fat-free Guide to Network Scanning
Copyright © 2010 Nicholas Marsh All rights reserved. ISBN: 1449902529 EAN-13: 9781449902520 www.NmapCookbook.com BSD® is a registered trademark of the University of California, Berkeley CentOS is property of CentOS Ltd. Debian® is a registered trademark of Software in thePublic Interest, Inc Fedora® is a registered trademark of Red Hat, Inc. FreeBSD® is a registered trademark of The FreeBSD Foundation Gentoo® is a registered trademark of The Gentoo Foundation Linux® is the registered trademark of Linus Torvalds Mac OS X® is a registered trademark of Apple, Inc. Windows® is a registered trademark of Microsoft Corporation Nmap® is a registered trademark ofInsecure.Com LLC Red Hat® is a registered trademark of Red Hat, Inc. Ubuntu® is a registered trademark of Canonical Ltd. UNIX® is a registered trademark of The Open Group All other trademarks used in this book are property of their respective owners. Use of any trademark in this book does not constitute an affiliation with or endorsement from the trademark holder.

All information in this book ispresented on an “as-is” basis. No warranty or guarantee is provided and the author and/or publisher shall not be held liable for any loss or damage.

3

4

Contents at a Glance
Introduction....................................................................................... 15 Section 1: Installing Nmap .................................................................. 19 Section2: Basic Scanning Techniques .................................................. 33 Section 3: Discovery Options .............................................................. 45 Section 4: Advanced Scanning Options................................................ 65 Section 5: Port Scanning Options ........................................................ 79 Section 6: Operating System andService Detection ............................. 89 Section 7: Timing Options .................................................................. 97 Section 8: Evading Firewalls .............................................................. 115 Section 9: Output Options ................................................................ 127 Section 10: Troubleshooting andDebugging...................................... 135 Section 11: Zenmap.......................................................................... 147 Section 12: Nmap Scripting Engine (NSE)........................................... 161 Section 13: Ndiff .............................................................................. 171 Section 14: Tips andTricks................................................................ 177 Appendix A - Nmap Cheat Sheet ....................................................... 187 Appendix B - Nmap Port States ......................................................... 191 Appendix C - CIDR Cross Reference ................................................... 193 Appendix D - Common TCP/IP Ports .................................................. 195

5

6

Table ofContents
Introduction....................................................................................... 15 Conventions Used In This Book ............................................................. 18 Section 1: Installing Nmap .................................................................. 19 Installation Overview............................................................................ 20 Installing Nmap on Windows ................................................................ 21 Installing Nmap on Unix and Linux systems .......................................... 25 Installing Precompiled Packages for Linux ........................................ 25 Compiling Nmap from Source for Unix and Linux ............................ 26 Installing Nmap on Mac OS X...