An Introduction to Port scanning and fingerprinting
Right then now we're gonna look into the details of Nmap and all of the commands and how you use it.
But before we do that, let's just have a quick introduction and a few cautionary notes.
So Nmap, as I've said, it's used as an information gathering tool, but unlike some tools for information gathering.
Nmap actually interacts with the target service or it does in most instances, although you will still consider this information gathering as it's not an attack per se note in some countries, even port scanning, maybe against their laws, plus Nmap can perform.
More invasive discovery techniques with scripts than just port scanning, which could or would be considered hacking by some nations and laws.
So bear that in mind.
Basic port scanning, generally.
You're okay with doing, but when you start using scripting within Nmap, you need to be aware that could act to be illegal in some jurisdictions.
The targets intrusion detection systems may well detect the port scanning, but this isn't an issue if you're trying to be stealthy because doing external port scans, at least when you're scanning the whole of the internet or you're scanning targets that are externally facing these types of scans happen constantly.
Our own station X serves a permanently port scan.
So this raises no suspicious alarms.
This is because hackers scan the internet all the time.
So it causes no alarm.
Port scanning is analogs to maybe looking at a house to see what sort of windows and doors it has before you think about breaking through them for scanning and map is precise and can fingerprint the majority of services discovered.
And just to make sure you're aware of all options for companies with very large IP ranges, Zmap.
Mass scan are also faster users alternatives for Nmap and also what web and blind elephant can be used for fingerprinting websites too, as alternatives for Nmap.
So Nmap, isn't your only choice, but it is the main tool that is used for network scanning for network discovery, versioning, etc.
So let's get on with it.