Host Discovery

Host Discovery Techniques using nmap

• general discovery: nmap -PS21,22,23,25,53,80,110,111,135,137,139,143,443,445,993,995,1433,1723,3306,3389,5900,8080,8443 -PE -PP -PM -PU53,67,68,161,500,514,1434 <cidr>
• IPv6 discovery: nmap -6 -PS22,53,80,135,445 <ipv6-range>
• ICMP sweep variations: nmap -PM -PP <cidr>
• ARP Discovery:nmap -PR <ip/cidr> -T3 -sP -n

Clean up nmap output (add the following to any of the nmap commands)

| grep -oE "(([1-9])([0-9]){0,2}|([1-9])([0-9]){0,2}\.){4}"

[!example] Example

Related

Related Notes

All Related Notes

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "smb") OR contains(tags, "windows") OR contains(tags, "scanning")
SORT file.ctime DESC

smb

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "smb")
SORT file.ctime DESC

windows

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "windows")
SORT file.ctime DESC

scanning

TABLE file.ctime as "Created", tags as "Tags"
FROM "New Notes"
WHERE contains(tags, "scanning")
SORT file.ctime DESC