Nmap
A classic open-source network scanning and security auditing tool supporting port scanning, service version detection, and operating system identification. It is one of the most widely used tools in penetration testing and network security.
Core Facts
Timeline (last 90 days)
Decoy scanning (-D) mixes forged source IPs with real scanning traffic, but too many decoys increase bandwidth consumption and the risk of detection, so it is recommended to keep the number within 50 to 100.
The SYN stealth scan (-sS) is Nmap's default scanning method (when privileges are available), exploits the characteristics of the TCP three-way handshake, and is fast and relatively stealthy.
Nmap's `-sV` option is used to identify service versions, `-sC -sV` runs the default scripts, `-A` performs aggressive scanning (OS detection, version detection, script scanning), and `-oN` saves the results to a text file.
Nmap and Masscan are commonly used for port and service detection.
In penetration testing scenarios, models with tool-calling capabilities can chain together specialized tools such as Nmap port scanning, the Metasploit exploitation framework, and SQL injection probing.
Security tools in Kali Linux include Nmap (port scanning and service identification), Sqlmap (automated SQL injection detection), Metasploit (exploit framework), and Burp Suite (traffic interception and analysis).
Common penetration testing tools include Burp Suite (web packet capture and vulnerability testing), Nmap (port and service scanning), and SQLMap (automated SQL injection detection).
Kali Linux integrates core tools including Nmap, Burp Suite, Metasploit Framework, Wireshark, and John the Ripper.
Nmap项目的ncat添加了SSL/TLS支持和代理连接等现代特性
The Kali Linux toolset covers the full workflow including information gathering (Nmap, Recon-ng), vulnerability scanning (Nikto, OpenVAS), exploitation (Metasploit, SQLmap), and password cracking (John the Ripper, Hashcat).
All Facts (12)
Nmap (Network Mapper) is an open-source network detection and security auditing tool developed by Gordon Lyon.
65%UnverifiedBurp Suite、Nmap、Metasploit是渗透测试中必须熟练使用的工具
85%UnverifiedThe Kali Linux toolset covers the full workflow including information gathering (Nmap, Recon-ng), vulnerability scanning (Nikto, OpenVAS), exploitation (Metasploit, SQLmap), and password cracking (John the Ripper, Hashcat).
60%UnverifiedDecoy scanning (-D) mixes forged source IPs with real scanning traffic, but too many decoys increase bandwidth consumption and the risk of detection, so it is recommended to keep the number within 50 to 100.
50%UnverifiedNmap's `-sV` option is used to identify service versions, `-sC -sV` runs the default scripts, `-A` performs aggressive scanning (OS detection, version detection, script scanning), and `-oN` saves the results to a text file.
50%UnverifiedThe SYN stealth scan (-sS) is Nmap's default scanning method (when privileges are available), exploits the characteristics of the TCP three-way handshake, and is fast and relatively stealthy.
50%UnverifiedNmap and Masscan are commonly used for port and service detection.
50%UnverifiedIn penetration testing scenarios, models with tool-calling capabilities can chain together specialized tools such as Nmap port scanning, the Metasploit exploitation framework, and SQL injection probing.
50%UnverifiedSecurity tools in Kali Linux include Nmap (port scanning and service identification), Sqlmap (automated SQL injection detection), Metasploit (exploit framework), and Burp Suite (traffic interception and analysis).
50%UnverifiedCommon penetration testing tools include Burp Suite (web packet capture and vulnerability testing), Nmap (port and service scanning), and SQLMap (automated SQL injection detection).
50%UnverifiedKali Linux integrates core tools including Nmap, Burp Suite, Metasploit Framework, Wireshark, and John the Ripper.
50%UnverifiedNmap项目的ncat添加了SSL/TLS支持和代理连接等现代特性
50%