Thread by @ReconOne_bk

Want to improve your network scanning skills with Nmap? 🕵️‍♀️💻

Check out these 5 quick tips to define targets, speed up scans, and scan with specific script categories! 🧵👇

#recon #recontips #AttackSurface #bugbounty #recontools #cybersecurity

1/5 Let's start with how to define targets.

Define targets for nmap scan by specifying IP addresses, IP ranges, domain names, or using a target list file.

$ nmap <IP1> <IP2> …
$ nmap 192.168.0.1/24
$ nmap <domain name>
$ nmap -iL <target list file>

2/5 The Ippsec scan for basic coverage.

Perform a comprehensive network scan using nmap's Ippsec initial scan.

$ nmap 127.0.0.1 -sC -sV -oA initial_nmap_scan

3/5 Effective Quick UDP Scan

Perform a quick scan of top 100 UDP ports using nmap with -sU (UDP scan) and --top-ports options.

$ sudo nmap 127.0.0.1 -sU --top-ports 100

4/5 Speedup the scan

Speed up network scan using nmap with options like -Pn (skip host discovery), -n (no DNS resolution), --min-rate (minimum rate of packets sent), and --open (show only open ports).

$ nmap 127.0.0.1 -Pn -n --min-rate 10000 --open

5/5 Nmap scan with specific script category: (auth, broadcast, brute, default, discovery, dos, exploit, external, fuzzer, intrusive, malware, safe, version, vuln)

$ nmap scanme[.]org -sV --script discovery

That's all for this thread on Nmap! Thanks for following along.
Be sure to follow @ReconOne_bk for more informative threads on Recon, tools and techniques.

https://twitter.com/ReconOne_bk/status/1641033203875020800?t=0qOQGuW6xTGGPRoK1gozLg&s=19