👾
PwnBook
GitHub
👾
PwnBook
  • 👾Welcome
  • ENUMERATION & EXPLOITATION
    • Reconnaissance
    • Network Services
    • Web Vulnerabilities
      • Command Injection
      • CSRF (Cross Site Request Forgery)
      • File Inclusion
      • File Upload
      • Path Traversal
      • SQL Injection
      • XSS (Cross Site Scripting)
    • Active Directory
      • Capturing NTLM hashes
  • Post Exloitation
    • Reverse Shells
    • File Transfer
    • Privilege Escalation
      • Linux Privilege Escalation
      • Windows Privilege Escalation
    • Pivoting
Powered by GitBook
On this page
  • Host discovery
  • Port scan
  • Service and version detection
  • Nmap scripts
  1. ENUMERATION & EXPLOITATION

Reconnaissance

Host discovery

nmap -sn 10.10.10.0/24
arp-scan -I <interface> --localnet --ignoredups

Port scan

nmap -p- -sSVC -n -Pn --min-rate 10000 -T3 -v <target>
nmap --top-ports 1000 -sU -n -Pn --min-rate 10000 <target>

Service and version detection

nmap -p <ports> -sCV -n -Pn <target>

Nmap scripts

nmap -p <ports> --script <script> <target>
Scripts usage

You can list all available Nmap scripts using the following commands:

 # List nmap nse scripts
 ls /usr/share/nmap/scripts | grep <service>
 # Get info about a script
 nmap --script-help <script>

Last updated 1 month ago