How to use the Zenmap Profile Editor
[00:00:00] Let's look at the Zenmap profile editor, which is a great tool. If you're not good at remembering all the available commands in Nmap. And let's be Frank, there are a lot of options in Nmap. So the profile editor, which is what you can see here is a tool for creating and editing Nmap commands within Zen map.
So this is what it looks like. Let me just. Uh, close closer a minute and you get to it by going to profile here and you can see there's two options. You can create a new command or you can edit an existing command. So if I go back to here, I'm actually editing the intense scan option. If I click on scan here, you can see what is ticked is what is actually enabled here.
So you can, of course, just directly enter a command here. So if I change this to T3 and we can see here that this has changed to T3, if I change it to T4, you can see it has gone to [00:01:00] aggressive mode. So we can go through the tabs and selection option and it will populate. There or remove it, or we can type it directly into the command itself or the command box.
And we can see a number of tabs here, which are common to what we've been going through on the course. It is slower obviously to create a command using the profile GUI, and it is just entering it on the command line. But on the plus side, the profile that is. Prompt you with helpful information. Like you can see here, which you wouldn't have at the command line.
So you can see we've got this information here. We've also got help here. We can see with scripts in particularly which you won't necessarily know the arguments for. We've got the arguments and we can enter the value. If we click on the timing tab, for example, we can also see if you're not quite sure, particularly on timing.
You can be confused as to what the actual example input is or the right input is we can also see the [00:02:00] example inputs. So Zenmap is a good training tool for using Nmap. So let's look at the tabs. We have profile here where we can edit the profile names so we can call it version two, and we can also edit the description here.
Pretty obvious we've got scan here. So these are the normal scan options that we are used to seeing TCP, none TCP scans, OS detection, version detection, idle scan, et cetera. We click these, it populates it into the command as are shown you. Ping. So these are all the discovery options. Don't ping before scanning ICMP ping.
And of course, just to remind you, if we look here, we can see the useful help information for these particular commands scripting, which I showed you before. Obviously this is the Nmap scripting engine, and you can specify the scripts that you want to add. I want [00:03:00] to use the name, Nathan. And there we go.
We can see it populates it useful for some of the more complex or it's useful to use. Nmap that was some of the more complex scripts. As you can see here to enable you to create those scripts. And if we go on to target pretty obvious, this is for target selection and you can open files to exclude and you can see you've got a target list, et cetera.
And then onto source. This is the source port and IP or the, this is the miscellaneous options we can see there. We've got verbose change the verbose settings. Work that up to three. And we've got timing and performance. So let's changed that to one. You will notice that all options are not actually available, that you have fully in Nmap.
So for example, there is no. [00:04:00] Data string or output options in here, but still there are plenty of options and definitely Zenmap is worth having a play with, especially when you're new. And especially when you're looking at scripting options, which can be a little bit more complicated to remember and to specify.
So there you go. That's the Zen map GUI, and I think it's a, it's pretty good. Really? It's a good addition to the Nmap command line tool.