# nmap -sS -T4 192.168.1.4 192.168.1.35 192.168.1.102įor a small number of targets this works, but it can quickly become cumbersome and isn’t all that readily repeatable. Doing so can easily be done in-line when you run Nmap. You can use Nmap to scan multiple targets at once. T3 is the default timing flag, but many users prefer -T4 to speed up the scan. These timings range from 0 through 5, with 0 being the slowest and least invasive and 5 being the fastest and most overt. While Nmap offers more fine-grained timing control, it also provides a set of six pre-built timing schemes with the -T flag. Not only does the timing of the scan determine how long scanning will take, but it can also be instrumental in triggering or not triggering firewalls and other safeguards on a target system. Even though it’s the default, it’s probably a good idea to specify it anyway. It just specifies the way that Nmap will scan. The -sS flag is the default scanning flag for Nmap. There are way too many to cover in this basic guide, but you can always check out Nmap’s detailed manpage for more. Nmap has tons of flags that you can set to specify just how you would like it to run. Useful FlagsĮven though the defaults do give some useful information, and you can tell which ports are open, it would still be nice to get some more data. It will also show that MAC address information and your IP again. The report will be sort, but it will contain a list of ports with their state and which service they correspond to. Nmap will take a few seconds to probe the computer with packets and report back. You can just write in the IP of that computer. Pick a computer that you own, and scan it.

By using the names and the hardware manufacturers, you should be able to tell what each device on your network is. Each device will have a name(if applicable), IP address, and MAC address with a manufacturer. What you’ll see when Nmap finishes is a list of every devices that was reachable. The sequence ends with 0/24 to tell Nmap to scan the entire subnet. If your home network doesn’t use the 192.168.1.X IP structure, substitute in yours. Open up a terminal, if you haven’t already, and run the following linux command. If not, Nmap has a tool to get the IP addresses of the computers on your network. If you already know the IP of one, awesome. Scanning the computer running Kali isn’t going to give you much of anything, so it’s best to pick another computer that you own. So, why not try it out on a computer on your network. Nmap has fairly intelligent defaults set, so you are able to just open up Nmap and run a scan without specifying anything but the target.

What is zenmap used for