Nmap Crash Course For Beginners

perform a basic nmap scan against an ip or host to reveal open ports on metasploitable and kali linux; test google.com to see http and https.

Detect hosts with a ping scan by specifying a subnet like 8.0/24 and sending icmp packets, revealing four active machines on the network—Kali Linux, Metasploitable, and the router.

Learn to scan all ports by default with Nmap or target specific ports using -p, including 1-65535 ranges or individual ports like 80, 443, and 112.

Scan multiple IP addresses with nmap by targeting metasploitable and kali machines, then perform a full port scan to identify open versus closed ports.

Conduct a hands-on nmap scan of the most popular ports by using the top ports option, adjusting the port count (e.g., 102, 1000, 10000) against a Metasploitable machine.

Perform a hands-on walkthrough of scanning hosts and IP addresses, filtering captured packets by a specific IP with IP.addr, then pinging google.com to observe source and destination details.

Learn to save Nmap scan results to a file using the -o option for a given IP address, choosing text or XML output formats in a hands-on exercise.

Use nmap -n to disable DNS name resolution and speed up scans by avoiding hostname lookup, as demonstrated on an in-network target.

Explore using nmap to perform OS and service detection with faster execution, leveraging the -T4 option in a hands-on scan of a metasploitable host and noting anonymous ftp.

Learn to detect service versions with Nmap by using -sV on a target IP, revealing state, service, and version information (e.g., Debian, Ubuntu).

Learn how to scan tcp or udp ports with nmap using sudo to gain root privileges, and observe that tcp scans run quickly while udp scans take longer.

Demonstrate CVE detection with nmap using host discovery off and the nmap scripting engine to scan Metasploitable 2 for ftp backdoors and ssl issues.

Learn to use the Nmap scripting engine to simulate a dos attack for defensive testing with slowloris, adjust max parallelism, and harden your system on a Metasploitable host.

Explore Nmap's brute force utility by testing an ftp server on a metasploitable machine with the -p 21 option, noting brute forcing is slow and not a modern approach.

This hands-on lecture demonstrates using nmap scripts like http-malware-host to detect malware on remote hosts, examine vulnerable services, and validate results with Google malware checks in a white-hat context.