Nmap使用

简介

Nmap（Network Mapper，网络映射器）是一款开源的、功能强大的 网络发现和安全审计工具，广泛用于网络探测、主机发现、端口扫描、服务识别、操作系统检测、漏洞扫描等任务。它由 Gordon Lyon（化名 Fyodor）于 1997 年首次发布，目前已成为网络安全领域最常用和最受信赖的工具之一。

官网：https://nmap.org/

安装

Windows：

下载 nmap-7.98-setup.exe，直接安装

Debian/Ubuntu：

1

apt update && apt install nmap

使用

扫描某个段的 IP 和端口情况

1

nmap 192.168.1.0/24

等待一会儿，可通过 “Enter”键查看扫描进度

输出：

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39


Nmap scan report for 192.168.1.1
Host is up (0.011s latency).
Not shown: 998 filtered tcp ports (no-response)
PORT     STATE SERVICE
80/tcp   open  http
1900/tcp open  upnp
MAC Address: F4:2A:7D:39:44:A8 (TP-Link Technologies)

Nmap scan report for 192.168.1.11
Host is up (0.012s latency).
Not shown: 996 closed tcp ports (reset)
PORT      STATE SERVICE
9090/tcp  open  zeus-admin
50001/tcp open  unknown
50002/tcp open  iiimsf
50003/tcp open  unknown
MAC Address: 86:BC:A8:FF:68:6E (Unknown)

Nmap scan report for 192.168.1.100
Host is up (0.020s latency).
All 1000 scanned ports on 192.168.1.100 are in ignored states.
Not shown: 1000 closed tcp ports (reset)
MAC Address: 16:23:22:62:30:AC (Unknown)

Stats: 0:00:14 elapsed; 255 hosts completed (4 up), 1 undergoing SYN Stealth Scan
SYN Stealth Scan Timing: About 67.00% done; ETC: 16:19 (0:00:00 remaining)
Nmap scan report for 192.168.1.10
Host is up (0.00s latency).
Not shown: 993 closed tcp ports (reset)
PORT     STATE SERVICE
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds
902/tcp  open  iss-realsecure
912/tcp  open  apex-mesh
3306/tcp open  mysql
5357/tcp open  wsdapi

Nmap done: 256 IP addresses (4 hosts up) scanned in 14.53 seconds