CEH: Identifying Services & Scanning Ports | Gathering Network And Host Information | NMAP

CEH scanning methodology is the important step i.e. scanning for open ports over a network. Port is the technique used to scan for open ports. This methodology performed for the observation of the open and close ports running on the targeted machine. Port scanning gathered a valuable information about  the host and the weakness of the system more than ping sweep.

Network Mapping (NMAP)

Basically NMAP stands for Network Mapping. A free open source tool used for scanning ports, service detection, operating system detection and IP address detection of the targeted machine. Moreover, it performs a quick and efficient scanning a large number of machines in a single session to gathered information about ports and system connected to the network. It can be used over UNIX, LINUX and Windows.

There are some terminologies which we should understand directly whenever we heard like Open ports, Filtered ports and Unfiltered ports.

Open Ports means the target machine accepts incoming request on that port cause these ports are used to accept packets due to the configuration of TCP and UDP.

Filtered ports means the ports are usually opened but due to firewall or network filtering the nmap doesn't detect the open ports.

Unfiltered means the nmap is unable to determine whether the port is open or filtered  while the port is accessible.

Types Of NMAP Scan

Scan Type	Description
Null Scan	This scan is performed by both an ethical hackers and black hat hackers. This scan is used to identify the TCP port whether it is open or closed. Moreover, it only works over UNIX  based systems.
TCP connect	The attacker makes a full TCP connection to the target system. There's an opportunity to connect the specifically port which you want to connect with. SYN/ACK signal observed for open ports while RST/ACK signal observed for closed ports.
ACK scan	Discovering the state of firewall with the help ACK scan whether it is stateful or stateless. This scan is typically used for the detection of filtered ports if ports are filtered. Moreover, it only works over the UNIX based systems.
Windows scan	This type of scan is similar to the ACK scan but there is ability to detect an open ports as well filtered ports.
SYN stealth scan	This malicious attack is mostly performed by attacker to detect the communication ports without making full connection to the network. This is also known as half-open scanning.

 

All NMAP Commands 

Commands	Scan Performed
-sT	TCP connect scan
-sS	SYN scan
-sF	FIN scan
-sX	XMAS tree scan
-sN	Null scan
-sP	Ping scan
-sU	UDP scan
-sO	Protocol scan
-sA	ACK scan
-sW	Window scan
-sR	RPC scan
-sL	List/DNS scan
-sI	Idle scan
-Po	Don't ping
-PT	TCP ping
-PS	SYN ping
-PI	ICMP ping
-PB	ICMP and TCP ping
-PB	ICMP timestamp
-PM	ICMP netmask
-oN	Normal output
-oX	XML output
-oG	Greppable output
-oA	All output
-T Paranoid	Serial scan; 300 sec between scans
-T Sneaky	Serial scan; 15 sec between scans
-T Polite	Serial scan; .4 sec between scans
-T Normal	Parallel scan
-T Aggressive	Parallel scan, 300 sec timeout, and 1.25 sec/probe
-T Insane	Parallel scan, 75 sec timeout, and .3 sec/probe

 

How to Scan

You can perform nmap scanning over the windows command prompt followed by the syntax below. For example, If you wanna scan the host with the IP address 192.168.2.1 using a TCP connect scan type, enter this command:

nmap 192.168.2.1 –sT

nmap -sT 192.168.2.1

More articles

1. Best Pentesting Tools 2018
2. Hack Tools Pc
3. Pentest Tools Url Fuzzer
4. Hacking Tools For Windows 7
5. Best Hacking Tools 2019
6. Hacker Hardware Tools
7. Hack Website Online Tool
8. Top Pentest Tools
9. Best Pentesting Tools 2018
10. Hacking Tools 2020
11. Pentest Tools Nmap
12. Hacking Tools Github
13. Pentest Tools Apk
14. Hacking Tools Free Download
15. Pentest Tools Bluekeep
16. Wifi Hacker Tools For Windows
17. Hack Tools For Games
18. Pentest Tools Kali Linux
19. Top Pentest Tools
20. Hacker Tools For Pc
21. Hack App
22. Hacking Tools Windows 10
23. Hackers Toolbox
24. What Are Hacking Tools
25. Pentest Tools Framework
26. Hacking Tools For Beginners
27. Hacking Tools Pc
28. Nsa Hack Tools Download
29. Hacker Tools For Mac
30. Hacking Tools Windows 10
31. Hack Tools For Windows
32. Hacking Tools Kit
33. Hack Tool Apk No Root
34. Hacking Tools Github
35. Pentest Box Tools Download
36. Computer Hacker
37. Black Hat Hacker Tools
38. Kik Hack Tools
39. Pentest Recon Tools
40. Hack Tool Apk No Root
41. Free Pentest Tools For Windows
42. Pentest Automation Tools
43. Hacking Tools For Kali Linux
44. How To Make Hacking Tools
45. Hacker Tools Linux
46. Hacker Hardware Tools
47. Best Hacking Tools 2020
48. Best Hacking Tools 2019
49. Pentest Tools Website
50. Hacking Tools For Windows Free Download
51. Hacking Tools 2019
52. Hacker
53. Hack Tools For Mac
54. Best Hacking Tools 2019
55. Hack Tools 2019
56. Hacker Tools For Mac
57. Pentest Tools Kali Linux
58. Hacker Tools Linux
59. Bluetooth Hacking Tools Kali
60. Physical Pentest Tools
61. Hacking Tools Github
62. Hacking Tools For Beginners
63. Hacking Tools Kit
64. Pentest Tools Online
65. Hack Rom Tools
66. How To Install Pentest Tools In Ubuntu
67. Hack Tools For Ubuntu
68. Pentest Tools Nmap
69. Github Hacking Tools
70. Termux Hacking Tools 2019
71. Game Hacking
72. Pentest Tools Android
73. Hacking Tools Pc
74. Hacking Tools Online
75. Hack Tools For Ubuntu
76. Usb Pentest Tools
77. Hacker Tool Kit
78. Pentest Tools Apk
79. Hack Website Online Tool
80. Hacking Tools
81. Hacking Tools Github
82. Hacking Tools Kit
83. Pentest Tools
84. Hacking Tools For Kali Linux
85. Hack Apps
86. Nsa Hack Tools
87. Pentest Tools Download
88. Hacking Tools For Games
89. Hacking Tools Github
90. New Hacker Tools
91. Android Hack Tools Github
92. Hack Apps
93. Pentest Tools Apk
94. Hacker Tools Mac
95. Hacking Tools Usb
96. Pentest Tools Github
97. Hacker Tools For Windows
98. Hacking Tools Software
99. Game Hacking
100. Hacker Tools For Mac