Scan

Goal

• Search for open ports and public services
• More on Nmap scan: https://github.com/lethanhtung01011980/Notes/wiki/Port-Scanning
• Zenmap-Nmap GUI: zenmap

Quick scan ALL ports!!!

• nmap -p- -T4 -A -v victim-ip <======= MUST DO THIS FIRST
• zenmap => Intensive scan, all TCP ports <======= OR MUST DO THIS FIRST

Target a port !!!

• nmap -sC -sV -p$ports victim-ip <========== TARGET A PORT

Scan for OS

• Seldom have good result: nmap -O -Pn victim_ip
• Check output of SMB vulnerabilities
• Windows 5.0 = Windows 2000
• Windows 5.1 = Windows XP