### nmap ### HTTPS -------------------------------------------------------------------------------- nmap --script ssl-enum-ciphers -p 443 192.168.1.1 nmap --script ssl-dh-params -p 443 192.168.1.1 nmap --script ssl-cert -p 443 192.168.1.1 SSH -------------------------------------------------------------------------------- nmap --script ssh2-enum-algos -p 22 192.168.1.1 nmap --script ssh-auth-methods -p22 nmap --script ssh-publickey-acceptance -p22 SMB ------------------------------------------------------------------------------- nmap -p 139,445 --script smb-protocols 192.168.1.1 -- @output -- | smb-protocols: -- | dialects: -- | NT LM 0.12 (SMBv1) [dangerous, but default] -- | 2.0.2 -- | 2.1 -- | 3.0 -- | 3.0.2 -- |_ 3.1.1 SNMP -------------------------------------------------------------------------------- nmap -sU -p161 --script=snmp-info 192.168.1.11 nmap -sU -p161 --script=snmp-brute 192.168.1.12 Alle SNMP Infos: nmap -sU -p 161 -sV -sC 192.168.1.13 OSX -------------------------------------------------------------------------------- dnet: Failed to open device XXXX --disable-arp-ping -------------------------------------------------------------------------------- nmap -sS --packet-trace # show response nmap -sn # arp host discovery scan vs runtime test -------------------------------------------------------------------------------- nmap -sU -p 445 adress/mask 0.5s nmap -v -A host 40s nmap -v -sS --osscan-guess -O --reason host 40s nmap -sP adress/mask nmap -sP 192.168.1.0/24 3s nmap -PU 192.168.1.0/24 21s nmap -PU --reason -v -O --osscan-guess 192.168.1.0/24 45s nmap -sU -p 445 192.168.1.0/24 3-5s nmap -sU -p 445 192.168.0.0/16 nmap -sP 192.168.0.0/16 > nmap-192.168.0.0-16.out nmap -sP -oN nmap-192.168.0.0-16.out 192.168.0.0/16 nmap -T5 -O --osscan-guess -oX nmap-137.xml 192.168.137.0/24 00:30 nmap -PU -T5 -O --osscan-guess -oX nmap-137-PU.xml 192.168.137.0/24 00:24