The Complete Nmap Ethical Hacking Course : Network Security

Create a cloud-based hacking lab to run nmap scans from the internet using DigitalOcean or AWS. Deploy Debian or Kali Linux and SSH into the cloud server to run nmap.

Use nmap to gather target information via port scanning and fingerprinting, focusing on the default top 1000 ports and protocols.

Learn nmap target specification using host names, ip addresses, networks, cidr notation, and domains, with targets at the beginning or end, and read targets from a file with -iL.

Learn Nmap port states, including open, closed, filtered, unfiltered, and open filtered, and what each state reveals about a host's exposure. Understand how probes and filters influence state detection.

Learn how to successfully discover active hosts on a network or the Internet, understand how discovery works technically, and select the best discovery options for varying host discovery requirements.

Explore Nmap host discovery options to identify active hosts and services, using ICMP, ARP, and TCP probes on local networks before proceeding to port scans.

Explore Nmap discovery methods, from a list scan with reverse DNS resolution and DNS names to ping scans and no-port scans that reveal active hosts on the local network.

Learn the available Nmap scan techniques, understand why they are core to Nmap, and discover how and when to invoke each technique.

Explore nmap scan techniques including null, fin, and Xmas scans that reveal open ports via tcp flags, plus idle, ip-protocol, sctp, and ftp bounce scans to identify hosts and protocols.

Master methods for selecting ports to scan and apply all of Nmap detection techniques, including service, version, and operating system detection, to enhance network security assessment.

Explore the goals and learning objectives for this section to view Nmap scan results in preferred formats, and learn to convert, merge, and compare outputs with Bash script tips.

Master Nmap output formats by using -oN, -oX, and -oG to generate normal, XML, and grepable results, filter hosts and ports with grep, and save or append live host lists.

Explore practical extras for nmap, including comparing scans with ndiff, converting xml reports to html for easy reporting, and scripting large scans to surface rare ports and potential vulnerabilities.