The Complete Nmap Ethical Hacking Course : Network Security

Install Nmap on Windows, Mac, and Linux from packages, learn to compile from source, and set up cloud-based hacking labs with Kali and VirtualBox.

Create a cloud-based hacking lab to run nmap scans from the internet using DigitalOcean or AWS. Deploy Debian or Kali Linux and SSH into the cloud server to run nmap.

Learn how Nmap serves as an information gathering tool for port scanning and fingerprinting, with scripting cautions and legal considerations, plus alternatives like Z map and mass scan.

Use nmap to gather target information via port scanning and fingerprinting, focusing on the default top 1000 ports and protocols.

Learn nmap target specification using host names, ip addresses, networks, cidr notation, and domains, with targets at the beginning or end, and read targets from a file with -iL.

Learn Nmap port states, including open, closed, filtered, unfiltered, and open filtered, and what each state reveals about a host's exposure. Understand how probes and filters influence state detection.

Learn how to successfully discover active hosts on a network or the Internet, understand how discovery works technically, and select the best discovery options for varying host discovery requirements.

Explore Nmap host discovery options to identify active hosts and services, using ICMP, ARP, and TCP probes on local networks before proceeding to port scans.

Explore Nmap discovery methods, from a list scan with reverse DNS resolution and DNS names to ping scans and no-port scans that reveal active hosts on the local network.

Learn the available Nmap scan techniques, understand why they are core to Nmap, and discover how and when to invoke each technique.

Learn how Nmap's syn scan quickly probes the top thousand ports for open, closed, and filtered states using a half-open approach, with a comparison to connect scans and UDP options.

Explore nmap udp scan techniques, using -sU with or without -sS to identify open and filtered UDP ports. Apply -sV to determine service versions and speed up UDP scans.

Utilize the ack scan to map firewall rules and identify filtered or stateful ports using reset responses and icmp errors; contrast with windows scan that uses tcp window field.

Explore nmap scan techniques including null, fin, and Xmas scans that reveal open ports via tcp flags, plus idle, ip-protocol, sctp, and ftp bounce scans to identify hosts and protocols.

Master methods for selecting ports to scan and apply all of Nmap detection techniques, including service, version, and operating system detection, to enhance network security assessment.

Explore nmap os detection via tcp/ip fingerprinting, sending tcp and udp probes, comparing results to the os db, and generating confident OS guesses.

Master how to use the nmap nse scripting engine, invoke single and multiple scripts, identify useful scripts and what to avoid, and understand script formats to begin writing your own.

Explore the Nmap scripting engine (NSE) and Lua-based scripts, covering categories like auth, discovery, default and brute force; learn how 600 built-in scripts automate network discovery, version and vulnerability detection.

Learn how to use the Nmap scripting engine with pre, host, port, and post rules, and explore practical scripts such as banner, http sitemap generator, and cross-site scripting checks.

Dive into the Nmap scripting engine NSE part 3, using SMB scripts for discovery and enumeration, vulnerability checks, and safe vs intrusive options, including broadcast and trace modes.

Master the Nmap scripting engine by downloading, installing, and running NSE scripts with arguments to detect proxies, vulnerabilities, cross-site scripting vulnerabilities, and SQL injection.

Learn to use the Nmap scripting engine to write Lua-based scripts that automate networking tasks, leveraging protocol libraries (DNS, HTTP, RPC, SNMP) and safe, portable, fast parallel scripting.

Explore the goals and learning objectives for this section, and learn to optimize Nmap timing and performance to speed scans and evade intrusion detection systems and firewalls.

Learn how to optimize Nmap timing for speed and accuracy by using the minus T option and timing templates (paranoid to insane), while omitting non-critical tests and staying updated.

Explore Nmap firewall and IDS evasion techniques, including fragmentation of tiny packets, decoy scans, spoofed source addresses, and controlled source ports to bypass filters, with notes on reliability and detection.

Explore firewall and ids evasion in nmap, using proxies to obscure source and adjust timeouts, while applying data length, random payloads, and os detection with mac spoofing guidance.

Explore the goals and learning objectives for this section to view Nmap scan results in preferred formats, and learn to convert, merge, and compare outputs with Bash script tips.

Master Nmap output formats by using -oN, -oX, and -oG to generate normal, XML, and grepable results, filter hosts and ports with grep, and save or append live host lists.

Explore practical extras for nmap, including comparing scans with ndiff, converting xml reports to html for easy reporting, and scripting large scans to surface rare ports and potential vulnerabilities.