Nmap scan private network hosts

Whether it is intranet *** test, extranet *** test or web *** test, the first step is to step on the spot, that is, scan (of course, if there are social workers at the high-end point). The scanning tool is nmap, and the usage of this tool has spread all over the network. The purpose of scanning is divided into several steps: 1. confirm whether the host is alive;2. confirm the operating system of the host;3. confirm the components run by the host;4. expand the vulnerability of the version on the component.

Here are the steps:

1. Confirm whether the host is alive

nmap - sP IP

Command of ping scan.

Starting Nmap 6.47 ( http://nmap.org ) at 2015-10-10 10:51 CSTNmap scan report for 10.20.255.153Host is up (0.00066s latency).

nmap - sS IP

Scan by SYN

2. Confirm the operating system of the host

nmap -O IP

3. Confirm component version

nmap -sV IP