nmap-usage

name: nmap-usage description: | Professional nmap scanning techniques and optimization for penetration testing. Use this skill when you need to perform network reconnaissance, port scanning, or service enumeration during authorized security assessments. version: "1.0.0" author: "Hackbot Security Team" tags: ["reconnaissance", "network", "scanning", "nmap"] triggers: ["scan", "port", "network", "nmap", "recon"] prerequisites: ["authorized_target", "network_access"]

Nmap Professional Scanning Techniques

Overview

This skill provides advanced nmap scanning techniques optimized for penetration testing engagements.

Timing Optimization

Aggressive Timing (-T4)

Use for fast, reliable scanning on known networks:

nmap -T4 -sS <target>

Stealth Timing (-T2)

Use when avoiding detection is critical:

nmap -T2 -sS -f --data-length 50 <target>

Parallel Scanning

nmap --min-parallelism 100 -p- <target>

Port Selection Strategies

Quick Discovery

nmap --top-ports 100 <target>

Full Port Scan

nmap -p- <target>

Specific Port Ranges

nmap -p 80,443,8080,8443 <target>

Service Detection

Version Detection

nmap -sV --version-intensity 9 <target>

Lightweight Detection

nmap -sV --version-light <target>

OS Detection

Aggressive OS Detection

nmap -O <target>

With Version + Script

nmap -A <target>

Output Formats

XML (for parsing)

nmap -oX report.xml <target>

Grepable

nmap -oG report.gnmap <target>

All Formats

nmap -oA report <target>

Useful NSE Scripts

Vulnerability Scanning

nmap --script vuln <target>