The -A option stands for « aggressive scan » and it enables a number of advanced scan options, including OS detection, version detection, and script scanning. This can be useful for identifying vulnerabilities that are specific to certain operating systems.Ħ- Conducting stealthy and aggressive scans # nmap -A 192.168.20.5 The -O option stands for « OS detection » and it allows to try and determine the operating system of the target host. The -p option is used to specify a range of ports to scanĥ- Detecting operating systems and version information # nmap -O 192.168.20.5 This can be useful for discovering services that may not be running on well-known TCP ports.Ĥ- Scanning a range of ports : # nmap -p 22,80,443 192.168.0.1 The -sU option stands for « UDP scan » which is used to scan for open UDP ports. This can be useful for evading detection by firewalls or intrusion detection systems.ģ- Scanning specific ports and ranges # nmap -sU The -sS option stands for « SYN scan » which is a stealthy scan that can be used to probe network hosts without actually establishing a connection. # nmap 192.168.0.1Ģ- Advanced nmap scan options : # nmap -sS

for example, you can use nmap 192.168.0.1 to scan a single host, or nmap 192.168.0.* to scan a range of hosts. The basic syntax for using nmap is simply nmap, where is either a hostname or an IP address. On Ubuntu/Debian : # apt-get install nmap nmap commands

> Processing Dependency: libpcap.so.1()(64bit) for package: 2:86_64 Loading mirror speeds from cached hostfile If nmap is not installed, you can install it by the command bellow :

I already wrote an article on nmap in French, click here if you want to take a look at Installation