📖
sheepwall
  • Overview
  • Cloud Hacking
    • Azure
  • Hacking
    • Recon
      • Nmap
      • Website Recon
      • Service Enumeration
    • Exploitation
      • GraphQL
      • Application Attacks
      • Web Server Attacks
      • JSON attacks
      • CMS attacks
      • SQL Injection
      • Cross Site Scripting
      • Command Injection
      • SSRF
      • SSTI
      • Server Includes
      • XXE
      • WSDL/SOAP
      • Serialization Attacks
      • Cryptography
      • JWT
    • Installation
      • File Uploads
      • File Transfers
    • Actions on Objectives
      • Networking
      • Linux
    • Tools
    • Windows
      • 1. Getting Foothold
      • 2. Windows Exploitation
      • 3. Enumerating Active Directory
      • 4. Dumping Credentials
      • 5. Lateral Movement
      • 6. Persistence
      • 7. Active Directory
      • 8. LAPS
  • Bug Bounties
    • SSRF to Envoy Admin Page
    • Leaky Error Messages
    • HTTP verb tampering results in administrator role to the application
  • APT Information
    • DFIR Summary
Powered by GitBook
On this page
  1. Hacking
  2. Recon

Nmap

Various Nmap commands

TCP scan 

$ sudo nmap -sSV -Pn -p- -A <target>

UDP scan 

$ sudo nmap -sU -v <target> --min-rate=50

Add random decoy IP to prevent blacklist 

$ nmap ... -D RND:5

Specify Source IP to prevent blacklist 

$ nmap ... -S <IP>

Specify Source Port to prevent blacklist 

$ nmap ... --source-port <port>
PreviousReconNextWebsite Recon

Last updated 2 years ago