Network mapper (nmap)

Nmap is an amazing tools used by Red and Blue teamer for offensive and defensive purposes.To run the Nmap command you'll need a target machine or a list of target machines. 

• nmap -iL list_of_hosts.txt.

​
- Used at the recon stage.
- ​Most command command is nmap -sV -sC <target ip-address>
* this command is too noisy. 

• nmap -Pn <target ip-address>
• ​nmap -sV -sC -p 22,80 -T4 10.129.189.116

Script:
​
ports=$(nmap -p- --min-rate=1000 -Pn -T4 <IP ADDRESS> | grep '^[0-9]' | cut -d '/' -f 1| tr '\n' ',' | sed s/,$//)
nmap -p$ports-Pn-sC-sV <IP ADDRESS>