Questions tagged [nmap]

Nmap (Network Mapper) is a security scanner originally written by Gordon Lyon (also known by his pseudonym Fyodor Vaskovich) used to discover hosts and services on a computer network, thus creating a "map" of the network.

Filter by
Sorted by
Tagged with
0
votes
0answers
20 views

How to setup nping echo mode to listen on an UDP port?

nping, which is part of nmap, has an echo mode: it runs as a client on one side and as a server on the other side to let you see what packets actually go through. However, I cannot make it listen on ...
0
votes
0answers
55 views

Azure SQL Database firewall allows TCP connections when they should be blocked

I am looking at a particular Azure SQL Database that has Server level firewall rules. I am told there are no database level firewall rules. Nmap reported open ports on the database even though the ...
0
votes
1answer
83 views

Firewall: How to identify forbidden ports based on a whitelist of allowed ports per target-host?

Assume I have a list of hosts I want to scan. For each host I have a list of allowed ports. 192.168.1.2;80,443 192.168.1.3;3306 The list above reads "1st IP is allowed to have port 80 and 443 open, ...
0
votes
1answer
33 views

Ho to use NMAP to check if a port is filtered by a firewall?

I have the following situation. I should have the access to a VM via SSH but trying to connect to this machine I obtain no response. I suspect that some firewall rules are blocking my request (so it ...
-1
votes
1answer
86 views

Apache2 not working with port 80 but working on port 8000 in Proxmox (same configuration)

Some months ago I hired a Kimsufi server, I tried to forward ports without luck. I abandon the server, some days ago I started to reconfigure everything again, but I'm having still problems. I ...
0
votes
0answers
54 views

find printers with hostnames via nmap

i want to collect information about my companies network via nmap. Scanning servers reveals their hostname but if i scan printers there is no hostname shown. Can anyone tell me why not? Or even better:...
1
vote
1answer
344 views

Why Nmap doesn't arp-scan find any devices when does?

When I run nmap -sn 192.168.0.0/24 I get the result: Nmap scan report for 192.168.0.1 host is up (0.16s latency). Nmap scan report for 192.168.0.103 host is up (0.19s latency). Nmap scan report for ...
0
votes
0answers
47 views

IIS 8.5 Request Filtering By Verb and nmap http-verb

My environment is IIS 8.5 on a Windows 2012 R2 Server. I am also using Zenmap version 7.80. A security audit revealed that the IIS has enabled the OPTIONS and TRACE http verbs, which are potentially ...
2
votes
1answer
106 views

Why do some unknown hosts show up with nmap option-sL , and not with -sn [and do I need to worry about them]?

Initial Disclosure I am not a network engineer and my expertise in this area is low. Background while using nmap 7.70 with nmap -sL to look for the IP address of a known device on our local ...
-2
votes
1answer
112 views

Hostname and Operating System - what is the best way to do the scan? [closed]

Is it possible to run an Nmap scan that give the output for Operating system and the hostname? If so what are the flags that needs to be used?
0
votes
0answers
198 views

nmap - how to find port forwarding to SSH

I have a firewall that forwards port 2222 to a Linux machine running SSH server on port 2222. The problem is I do not know what the IP of the firewall is. So I want to scan the subnet to tell me ...
1
vote
3answers
174 views

Nmap - Specify which probe(s) to use?

I'm trying to determine if it's possible to specify probe types for nmap to use. For example, I want to scan a subnet (say 192.168.0.0/24) and probe every port on every host to see if a web server is ...
0
votes
0answers
64 views

Nmap has inconsistent output

I'm port scanning a VERY large pool of addresses. Hundreds of /24s, a few /16's. I'm just auditing open services across the board, specifically worried about IoT. The command I'm running is: nmap -...
0
votes
1answer
40 views

nmap - get detailed output for requests?

Update 2: pf already defaults to drop. What causes nmap to notice the server? What does 'received reset' mean? Update 1: Maybe I misinterpreted my findings. When run with -v2, nmap tells me that "...
0
votes
1answer
44 views

why same nmap command behaves different at server than local machine?

I am running this nmap command on local machine (Windows 10 with nmap https://nmap.org/book/inst-windows.html) nmap --script ssl-enum-ciphers -p 443 api.valorebooks.com and it is showing SSL ...
0
votes
1answer
29 views

Using nmap to scan an entire range

I found many examples with nmap online, but I got curious and I could not find a more advanced command. For example, if I want to scan a rage of ip in this measure, 192.168.x.x, then from 192.160.0.0 ...
-2
votes
1answer
66 views

Nmap takes forever when pinging ports [closed]

When I execute nmap -sn 192.168.1.0/24, it takes 12 seconds to find 256 hosts but when I execute nmap -sS 192.168.1.0/24, it takes forever. Why is this happening? I cannot see what I did wrong. ...
0
votes
1answer
21 views

NMap Topologie missing Switches (no kind of Topology)

I did scan some of our Networks but for any reason NMap doesnt applies any kind of topologie. It seems like there is everything connected directly but there are switches in between and those ...
0
votes
1answer
124 views

why does ssh tunnel leaves ports opened with default services

I haven't tried in a different machine, but I am trying to establish an ssh tunnel to an external server. This how I am doing it: ssh -L 9898:firewalled.service.com:443 user@some-server I have 2 ...
0
votes
1answer
1k views

Nmap reporting open http-proxy on 8080, but none is running

While executing the following command from my Mac OSX: nmap -PN server.com It reports the following: Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-18 16:14 EDT Nmap scan report for server....
1
vote
0answers
100 views

NPing gives significantly less time on `TCP Connect` than `TCP`

I'm using NPing (NMap's pinging tool) to measure latency on specific servers that may not respond to ICMP. Also, servers do not usually run HTTP(S) and I only check latency on a specific TCP port ...
0
votes
1answer
143 views

nmap output in csv format sorted by last octet in ip address

I have this command which works well to give me a list of ip address, MAC address, and Mac Vendor sudo nmap -sn 192.168.0.0/24 | awk '/Nmap scan report for/{printf $5;}/MAC Address:/{print " "substr($...
0
votes
1answer
506 views

Strange NMAP output

I am trying to scan TCP port 8092 of a host using nmap 7.60. When I execute nmap without root privileges it says that the port is filtered, but if I try to scan it with sudo it tells me that the port ...
1
vote
1answer
171 views

Why does nmap show port 25 as open? Server's firewall should block port 25

nmap 7.70 executed remotely shows the server's port 25 as open. However, the firewall on my VPS server only opens ssh, http and https services. On the laptop: nmap x.x.x.x Not shown: 996 filtered ...
0
votes
1answer
140 views

regular nmap scan flaky; hosts are missing sometimes

I'm using nmap 7.6 to scan my local wired network every minute. The problem is that the scan results are flaky: Sometimes hosts are missing in the result, although they are definitively available (e....
0
votes
1answer
552 views

IP Camera does not show open ports for RTP streaming but shows RTSP port open

I ran nmap on my IP camera to see what ports are open. I see a RTSP port open on port no 554, as expected. However, I do not see any ports open for RTP-RTCP streaming. Here is the output of nmap: ...
0
votes
0answers
38 views

Turned off SSL's in JBOSS nmap thinks different

I set my JBOS server to use TLS only with the following line in the connector sslEnabledProtocols = "TLSv1.1,TLSv1.2" but when I check the server with NMAP it shows: ssl-enum-ciphers: | SSLv3: | ...
-1
votes
1answer
2k views

iptables rules and port scanners blocking

In order to block port scanners on Linux, i have found some rules on iptables to block attacker IP address. These rules work correctly and it blocks the attacker, and logs the attacker ip address in ...
1
vote
1answer
381 views

netstat vs nmap to find IPs in a local network

I'm in a local network : IPv4 shared address space (100.x.x.x). Connected to a wifi hotspot. Ip ranges : 100.76.164.0/23 When I run : nmap 100.76.164.0/23 : It says all the hosts are down netstat -...
0
votes
1answer
33 views

Nmap Performance Mass Scanning SSL/TLS Certificate Data

Is Nmap built to use all of the available resources eg. in a server such as Dell PowerEdge T620 Server Xeon 16 Core 2.6GHz 128GB RAM with connectivity to both network ports? Basically, would the ...
0
votes
1answer
1k views

nmap port 22 filtered implications

I did the nmap scan on the list of external public ip (linux hosts). I tried to test out if any not needed services are opened. I realized there are many unfiltered ports on ssh tcp/22, however when ...
1
vote
1answer
759 views

How to prevent nmap from fingerprinting HAProxy

In our periodic security scans, our HAProxy instances are always reported as a version disclosure vulnerability. On further inspection, it appears that there are no version banners in any responses ...
0
votes
2answers
4k views

In Linux server - how to check if established TCP port connection supports TLS 1.2

I have a Linux server that has an established TCP port connection to a client. Can I somehow check if the connection on this port supports TLS 1.2 with any of the networking commands on a basic Linux ...
1
vote
0answers
122 views

nmap showing different results every time

I am running: nmap -sP 192.168.251.0/24 to see the hosts in the office network. Every time that I run the command it shows a different result, for instance it sometimes shows 192.168.251.13 192....
0
votes
1answer
1k views

What is service “ismserver” listening on port 9500?

I am on Ubuntu 16.04 Upon nmap -sV localhost, I came upon the output line 9500/tcp filtered ismserver which I cannot recognize. The service ismserver listening on the port matches the IANA record, ...
-2
votes
1answer
834 views

Hide running service such as Nginx from a port scan

When I run a Port Scan to my server through NMap (like this)... $ nmap -A -p443 example.com ...then I get an output like... Starting Nmap 7.70 ( https://nmap.org ) at 2018-03-29 00:14 BST Nmap scan ...
-1
votes
1answer
34 views

Weird behavior of VPS host

Hi I noticed strange behavior on my VPS host I launch nmap on my laptop and scan VPS host nmap screenshot Listed netstat on VPS server netstat screenshot Tried to connect to some port connection ...
0
votes
1answer
6k views

SQL Server 2014 Disable SSL/TLS

I am running SQL Server 2014 on Server 2012 R2. Both are updated and current. I did a clean install of both and nothing else. I then requested VPN access for an offsite vendor and our security group ...
1
vote
1answer
54 views

Can a Syslog server recognize a client OS?

I recently set up a central syslog server. Logs are organized in files, in folder named after the client machines (using DNS), and scanned with logcheck. Some of the client machines have more than ...
0
votes
0answers
1k views

How to disable CONNECT method in Apache 2.4.29 and return 405 status?

I'm using Apache 2.4 as a reverse proxy and according to this post, I have no use for the HTTP CONNECT method. So I tried disabling proxy_connect module when I built Apache using configure (static) ...
0
votes
2answers
589 views

Scanning internal network in search of Jenkins instances

I have issues with find all Jenkins instances in environment: I've tride to use nmap with http-title script to find all that answer with Dashboard[Jenkins] but some of them had more redirections than ...
-4
votes
1answer
465 views

Difference between local and remote nmap - trying to set up mysql server remote access [closed]

I am try to set up mysql remotely. I have followed a number of guides such as this, and I have ended up using nmap to see what ports are open. When I am on my laptop, nmap -P0 <server> gives: ...
1
vote
3answers
5k views

SSL unsupported protocol error

I'm trying to use ncat to connect between virtual windows7 and linux machines. On linux: ncat -vnl 4444 --ssl On windows: ncat -v 10.10.14.2 4444 --ssl And when I try to connect from the client I ...
1
vote
1answer
1k views

Apache/Tomcat web server: nmap always returns that all http-methods are allowed

I'm running a web server with Apache http server in front of an Apache Tomcat server. My goal: Disable http-methods DELETE and PUT on the web server. According to OWASP (https://www.owasp.org/index....
2
votes
2answers
1k views

ssh-keyscan does not reveal DSA ssh-dss key

I am using ssh-keyscan to obtain public keys for a couple of SSH servers. One of my appliances only supports DSA / ssh-dss. ssh-keyscan with the "-t dsa" option is not able to get the public key while ...
2
votes
3answers
3k views

Port scanning and Windows Firewall

I am trying to understand the results I am getting when scanning ports on a machine that has an active built-in Windows Firewall. My test environment has two Windows 7 machines running in Hyper-V VMs ...
1
vote
1answer
3k views

What is the fastest way to scan all ports of a single maching using tcp scan

After reading this post here, from security.stackexchange, I was wondering what is the best way to scan all ports of a single maching using tcp scan only. "nmap -sT -p 1-65535 localhost" is what I ...
0
votes
1answer
52 views

getting hardware information of all devices on the network

I was wondering if i can get a full hardware information about each device on the network? (preferred linux commands) with the nmap command I found the devices in my net, but only name, ip addresses ...
1
vote
1answer
375 views

ncat on UDP protocol (RH 7)

I'm resuming the discussion "Check if remote host/port is open - Can't use GNU Netcat nor NMap - RHEL 7". I can't obtain the correct result because on my rh versions (5.6 and 7.1) there isn't the path ...
0
votes
0answers
80 views

Scan network for all devices

I'm running into a small issue with a network, when I scan it using either nmap or even Fing for android, I can only get the router, and my device, even though I know other devices are connected. This ...

1
2 3 4 5