Zenmap is no longer part of Kali linux but that doesn't mean we can not install it ourselves. A simple and easy guide how to add Zenmap to latest versions of Kali linux can be found at:

https://www.stationx.net/installing-zenmap-on-kali-linux/

How to use Zenmap - Nmap GUI

We're going to look at the Nmap, GUI called Zen map.

Now, here we are in the Kali Linux operating system.

Let's pop over to here.

And if we type in Zenmap.

We can see three options for Zen map in kali Linux.

Now we want this option here. See, this is Zen map and it's ruined out route.

We can't see cause it's, not showing at all, but that's run as route to run as route option.

You want to run as route.

If you want the full functionality of Zen maps, such as SYN scans, and this is the same in windows or Mac runs Zenmap with the admin, the power users.

So you get the full functionality of Zen map.

So we would click on this here, but I've already got one open.

So let me open one here.

And there we go.

That's the Zen map GUI, and it will look the same in all operating systems or very similar and everything is in the same sort of place.

So let's talk through the GUI. The simplest way to use Zen map is to type in a command.

As you can see here in the command box, and then you simply press scan and it will do a scan.

So the next thing we would want to put in here would be our targets, but it's best not to put the targets on the command line.

We want to put the targets in the target box.

That way it's easier to delete them later.

So, if we click on this here, we can see some previous scans that have already been done.

So let's have a look at this one.

So we're going to look 192.168.1.254.

And we're going to look at scanme.nmap.org.

Notice there's no comma between there and you can see it creates the command here on the command box.

And let's just do our first scan to show you what it does.

So we click the scan button and the scan starts.

The output for the Nmap scan, you can see here on the Nmap output tab, this is the same as the standard Nmap outport with added colors and to the right here.

Can you see that?

That's the progress bar, so you can see that it's going.

And if we look here, we can remember that -T 4 that is the aggressive mode for which speeds up the.

We've got -A this enabled OS detection, version detection and script scanning and trace route for these two hosts here.

And we've got the -V, which is the verbose output verbose level one output.

So that's what we're getting here.

So you can see this is the same standard output as you would get from Nmap.

And there we go.

The scan is now complete, and as you can see, we've got the results.

The results that we would normally see, but what's different here is we can see the hosts that have been separated out.

So we've got the scan me host the Nmap host, and we've got the local host the dot 2, 5, 4. So let's look at the results.

Let's go through the tabs.

So we've seen the output tab. We can see.

This is the scan we can select down for the scan to the first tab we have here is ports and hosts.

So for each host that we click on, so we can see here, I click on this one.

We can see the port state.

We can see if it's open, closed filtered.

We can see the protocol.

Service and if the version was requested, then we can see that display too.

So you can see here on this one, it's running Apache and open SSH, so same results as what we're used to, but it's just in a nice tabulated table format and we can see the results here.

We've got 22, 80, 9 9 29 and the elite port running on, scan me and on dot 2, 5, 4, we've got SSH.

We've got Telnet.

We've got port 80 and we've also got some other random port here at the top.

So there we go.

That's quite a useful tab.

We've got the topology tab here.

You have various ways to see a graphical display of the scan host.

Now, this doesn't look particularly busy here, but if we enable a trace route, you'll see lots more hosts on here.

So let's look at these buttons.

Let's click on this one, drag it down here.

This isn't just another way to look at the host and the information that we've seen before.

If we click on fish eyes, we can zoom in on different parts.

Onto controls. We can change here.

What we see there, for example, we can remove the addresses or we can remove the host names, etc, change to the position of where we are legends.

We can see what icons represent and ultimately we can save the graphic when we're happy with it.

Let's pop over to the host details tab for each host that you click on.

You can see the host details, the more information you request in the scan, the more details you will see here.

So, because I requested OS detection, version detection, script scanning, etc.

I can see more because that's been enabled. If I click on it.

This will have a little less information because there's a public server and this will have a little more information cause it's a local server, so we can see the uptime.

We can see, we had four open ports, 996 closed ports.

A thousand was scanned in total, the IP address, the guests at the operating system.

We can see the port used OS class and the rest of the information that we've gone through before, like TCP sequence. IP ID sequence and so on.

So let's pop over to the scans tab here.

You'll be able to see a list of the scans, which you have done within Zen map.

So at the moment, we can see only one, which is the scan that I've just done and that it is on the saved.

We can append the scan so we can add another scan to this.

So let's add that one.

And now we can see all of the results added to the.

And we can see that that's below and see all of these hosts have been scanned down here.

Be able to see all the details of the.

Let's get back to scans.

So append just appended one, they click on it.

I can remove a scan and that will also remove its output from here, which can be quite useful if it starts to get a little bit messy.

And of course, if I remove one.

You'll see all the hosts that are relevant to that scan disappears.

If I remove that one, we can see all of those hosts from that disappeared.

If I double click on this, it'll take me to the output tab for the output for that scan.

We can see this is unsaved.

So if you go on scan and save scan, we can save the scan.

If we've got multiple scans here, we can save all scans to the directory.

We can open a new window, which you can see here.

We can open a scan.

So if we open a previous scan, this one will be able to see the results.

Just scan that across that one.

So here we are pretty standard stuff.

Open scan, a new window print, close window, and in tools we can compare results.

So if we select the results of 1.

With another, we can compare those results and search scan results here.

And we can also filter host.

If we click on there, you'll notice at the bottom.

We've got this here.

If I do a dot 2, 5, 4, and return, you'll see that.

It'll just show that host.

So that's a quick look at the GUI.

We're going to go through more next.