Nmap (Network Mapper)

 Nmap (Network Mapper)

Nmap (Network Mapper) is the flagship network discovery and security auditing tool included in Kali Linux. It is used to discover hosts, open ports, running services, and even operating system versions on a network. 

                                                 

                                                            you can Download Book

At its core, Nmap sends raw IP packets and analyzes the responses to determine what is live on the network. It is incredibly versatile, supporting advanced scripting, version detection, and various scanning techniques to evade firewalls.

Here are practical examples of its most common uses:

- Basic Host Discovery (Ping Sweep): To find all live devices on a local network, use a ping scan. This quickly identifies which IPs are responsive without probing ports. 

  `nmap -sn 192.168.1.0/24`

- Port Scanning: To aggressively discover open ports, service versions, and operating systems on a specific target, use the `-A` (Aggressive) flag. This combines OS detection, version detection, and traceroute. 

  `nmap -A 192.168.1.10`

- Vulnerability Scripting: Nmap includes the Nmap Scripting Engine (NSE) which allows users to run vulnerability checks. For example, to test if a web server is vulnerable to the EternalBlue exploit, you can use:

  `nmap --script vuln 192.168.1.10`

- Firewall Evasion: To bypass basic firewall rules, you can use a SYN stealth scan (`-sS`), which never completes a full TCP handshake, making it less likely to be logged by the target. 

  `nmap -sS -p 443 192.168.1.10`

Because of its speed, flexibility, and extensive scripting library, Nmap remains the first tool security professionals reach for during the reconnaissance phase of any penetration test.