Kali Linux: Scanning the host with Nmap

Nmap-network Mapper, is a well-known network scan and sniffer toolkit. He also supports Windows and OS X.

Scan open ports and determine operating system type

Let's first ping a range of addresses and find the host that is booting:

# nmap -sP 159.203.205.0-100

To probe the operating system type using a SYN scan:

# nmap -sS 159.203.205.61 -O

Scan Open Ports:

# nmap -sV 159.203.205.61 -A

Scan Web server's Web site Directory

# nmap –script http-enum.nse blog.topspeedsnail.com

The script is used to store the path: (/usr/share/nmap/scripts). There are various scripts in the directory.

Scan host SSL Heartbleed Vulnerability (2012)

# nmap -d –script ssl-heartbleed –script-args vulns.showall -sV 192.168.0.106

Kali Linux: Scanning the host with Nmap