The Complete Nmap Ethical Hacking MasterClass

Install nmap on Windows by downloading the Windows binaries and completing setup, then use network scanning to identify open ports and operating system detection.

Learn to update the system, install nmap on Linux using apt-get, and verify the Kali Linux setup with nmap and basic scanning examples.

Explore how local networks connect devices via modems and wifi, and learn to map and scan with Nmap for open ports, operating systems, and vulnerabilities.

Explore the OSI model from application to physical, detailing data flow, encryption at the presentation layer, three-way handshake, and how packets, frames, and headers like IP, MAC, TCP/UDP guide messages.

Explore how TCP's three-way handshake establishes a connection using SYN, SYN-ACK, and ACK messages, with sequence and acknowledgment numbers guiding data flow and port reachability.

Explore how ports function as access points for network services, showing how IP addresses and port numbers identify specific services, and how port scanning reveals open or closed ports.

Learn about the top 20 open tcp ports and their roles, including telnet 23, ftp 21, ssh 22, smtp 25, dns 53, and https 443.

Learn the top 20 most commonly open UDP ports, including dhcp, dns, ntp, ipsec, snmp, netbios, and upnp discovery, with practical notes for secure scanning in the Nmap MasterClass.

Choose an authorized target and build a safe scan lab with a local network machine or virtualization (VirtualBox, Windows, Kali Linux). Learn practical Nmap scanning while respecting permissions.

Perform a default nmap scan to quickly assess a target, watch the results load, and review the generated scan report detailing the host status.

Perform a service version scan with Nmap using the -sV flag to reveal running software versions on open ports, guiding vulnerability assessment.

Learn how to save nmap scan results to a text file, name the output, and verify the saved data, with a glimpse at saving to XML in a future lesson.

Learn how to save nmap output to an xml file, fixing write errors by providing a proper file name, and review tcp-based scan results.

Learn to log nmap scans with the -oA flag to generate three log files: text, image, and gnmap, and search them to find open ports and timing data.

learn to use nmap to scan specific ip ranges and ports, including default top 1000 ports, and customize port ranges with the -p flag for full 1-65535 scans.

Learn to use the --reason flag in nmap to determine whether ports are open, closed, or filtered, and interpret sin and ack responses during scans.

Exclude specific targets from an nmap scan to survey an entire local network while skipping hosts like Windows seven or Windows server.

Identify online hosts with ping sweeps and ICMP using nmap, then verify results with superuser privileges to accurately reveal alive machines across a network.

Master ping-agnostic Nmap scanning to enumerate every host in a target range, including port ranges, uncover open ports and services even when ping fails, and perform complete port scans.

Learn to scan UDP services with Nmap, recognizing UDP scans are slower and less reliable than TCP scans, often needing a two-pass approach with -sU after an initial scan.

Master tcp scan techniques with nmap, including stealth syn and half-open scans, as well as null, xmas, and xmas-tree scans, to understand how closed and open ports respond during probing.

Learn to perform operating system detection with Nmap by leveraging a fingerprint database to identify target systems across a network, including confidence estimates for the detected OS.

Increase scan verbosity to reveal more information at each level, from basic progress to network and packet details, with three levels of output during an nmap scan.

Explore packet tracing and debugging with Nmap to analyze exact network traffic, port 80 and HTTP activity, and identify congestion and packet loss.

Learn to use nmap to scan the top ports, reducing the default thousand-port scan with flags to target a specific number of top ports, and interpret open versus filtered results.

Learn how to use nmap to guess a target's operating system via tcp/ip fingerprinting, identifying Windows versions such as 7, Vista, or Server 2008, and applying OS-detection flags when needed.

Explore host and network discovery in nmap. Learn how ICMP and ping-based scans reveal open ports and targets, and apply flags for detailed discovery, including DNS and traceroute options.

Discover how disabling ping enables stealth scans with Nmap to bypass ICMP blocks and reveal only open ports on targets behind firewalls.

Learn basic ping scanning with nmap on a local area network to identify which hosts are up, reveal mac addresses, and show how root privileges enhance results.

Explore how tcp syn ping scan evades icmp blocks, discovers open ports by default or on specific ports, and demonstrates port and MAC address results across a mixed vm network.

Demonstrates tcp ack ping discovery as a method when icmp is blocked by a host firewall, and how to tailor port scans to specific ports on a Windows 7 system.

Demonstrate UDP ping and UDP scan by sending UDP packets to a host and observing responses to distinguish blocked traffic on strong systems from open ports on weak systems.

perform an sctp init ping scan to discover hosts by sending sctp init packets and capture results, including mac addresses, from different systems.

perform an icmp echo request scan with nmap using the -pe ping flag on a local area network, and understand icmp and internet control message protocol basics.

Explore icmp timestamp requests and how targets block responses, using a Windows 7 example with nmap and sudo, then speed scans with timing options T4, T3, and T2.

Learn to use the icmp address mask scan in nmap with the -pm flag to probe targets and bypass some firewall restrictions. See a live example where five ports open in about 23 seconds.

Learn how to perform IP protocol ping scans with Nmap by selecting protocols such as ICMP, UDP, TCP, and IP in IP, using protocol numbers and interpreting results.

Explore arp ping scans on local networks using nmap with the -PR flag, sending address resolution protocol packets that local hosts often cannot block, limited to LANs.

Explore how traceroute reveals the path and hops across a network, showing open and filtered ports, IP addresses, and device details from Linux and Windows hosts.

Learn reverse DNS lookups in Nmap, mapping IP addresses to hostnames, and how disabling reverse DNS speeds up scans on a network with Windows servers and open ports.

Explore how to use external dns servers in nmap scans, including configuring dns sources and leveraging third-party dns to influence scan results across different targets.

Enable version detection in nmap using the flags shown to reveal service versions, operating system hints, and details like open ports on targets such as Windows servers.

Learn to perform UDP port scans with nmap and enable version detection to identify running services. Adjust speed with timing options and scan a whole network for comprehensive results.

Learn about the wide range of port scanning techniques supported by Nmap, from TCP SYN and connect scans to UDP, FIN, Xmas, and IP protocol scans, with practical explanations.

Explore how to select ports with Nmap using -p for single, multiple, ranges, and top ports; combine TCP and UDP scans and generate targeted reports.

Learn how Nmap classifies ports into six states—open, closed, filtered, and the combined open or filtered and closed or filtered—and how these classifications guide detection and security considerations.

Explore window scans in Nmap, which use TCP window behavior to distinguish open ports from closed ones, like an X scan with a different approach. The lecture also covers maimon scans and UDP scans, including fast mode for scanning hundreds of ports and interpreting results.

Learn how to customize host group sizes for Nmap scans by batching targets into 256-host groups for faster parallel results, or scanning all at once for broader visibility.

Adjust parallelism by tuning the number of simultaneous probes to balance scan speed and reliability, preventing network issues and avoiding monopolizing the app.

Explore how to optimize Nmap scans by adjusting the built-in timing flag from T1 to T5, balance speed with reliability, and tune parallelism, timeouts, and scan delays for varied networks.

Explore timing templates from 2 to 5 to control nmap speed, adjusting initial RTT, minimum and maximum timeouts, retransmissions, parallelism, and probe delays.

Explore how to tune Nmap timing with probe delay and rate, using can delay, min and max settings, and mean rate and max rate controls to optimize stealth and efficiency.

Learn how to use and modify time-to-live in nmap scans, understanding ttl values from 0 to 255 and how packets are dropped when ttl expires.

Explore the Nmap scripting engine and its Lua-based framework, enabling port scanning and community-driven scripts through NSE since its 2006 release.

Explore the Nmap scripting engine (NSE) documentation, uncovering script categories such as authentication, discovery, brute force, and exploit, with guidance on choosing and learning from the NSE repository.

Learn to select NSE scripts for scans using the Nmap scripting engine. Explore running single or multiple scripts, limit ports, and interpret results across hundreds of script categories.

Use Nmap with NSE scripts to geo-locate targets by IP, leveraging IP geolocation, IP info db, and geo bytes to reveal coordinates and attacker location.

Learn to run NSE scripts in Nmap scans, update the script database, and select scripts by category or name to reveal open ports, services, and OS details.

discover how to trace and debug nmap nse scripts, use a default script and the script trace feature to reveal script vulnerability and results for target hosts.

Learn to use expressions and arguments in NSE to exclude exploit and intrusive scripts, and to combine broadcast and discovery categories for targeted scans.

Learn how to fragment packets to evade firewalls, use nmap to vary MTU values and test windows seven firewall, and observe how dividing each packet changes the results for evasion.

Use decoys to confuse defenses during nmap scans by simulating traffic from multiple devices, set decoy count to 10, and scan a target ip to reveal open ports.

Discover how adding a 30-byte payload to each packet can influence firewall filtering and bypass protections, with a focus on Windows 7 as a test target.

Explore randomizing target order in nmap to bypass firewalls and hide who is scanning, improving stealth while testing multiple targets and anonymizing IP and MAC addresses.

Explore mac address spoofing using nmap to evade detection on campus networks, learn how mac addresses can be automatically generated or specified, and discuss firewall and network availability considerations.

Learn to monitor nmap scan progress on large networks using timed intervals to observe state updates and completed results during slow scans.

Detects which http methods a website supports using nmap with the http-methods script on https ports, revealing supported methods such as get, post, and options.

Check http proxy support using nmap with sudo and map script to identify open proxies. Learn how to determine if a proxy is open or closed through a practical test.

Discover how to locate directories on a web server using network scanning tools and scripts, identify interesting folders within a target address, and interpret scan results.

Celebrate finishing the course and step into the ethical hacking world with improved self-esteem and confidence.

Share your feedback and ideas to help improve this course, enhance the student learning experience, and drive small, regular improvements.