Nmap Cheat Sheet
Nmap Cheat Sheet
Nmap Cheat Sheet
Timing Options
Timing Templates Set the packet TTL Minimum of parallel connections Maximum of parallel connection Minimum host group size Maximum host group size Maximum RTT timeout Initial RTT timeout Maximum retries Host timeout Minimum Scan delay Maximum scan delay Minimum packet rate Maximum packet rate Defeat reset rate limits nmap -T [0-5] [target] nmap ttl [time] [target] nmap min-parallelism [number] [target] nmap max-parallelism [number] [target] nmap min-hostgroup [number] [targets] nmap max-hostgroup [number] [targets] nmap initial-rtttimeout [time] [target] nmap max-rtt-timeout [TTL] [target] nmap max-retries [number] [target] nmap host-timeout [time] [target] nmap scan-delay [time] [target] nmap max-scan-delay [time] [target] nmap min-rate [number] [target] nmap max-rate [number] [target] nmap defeat-rstratelimit [target]
Discovery Options
Perform a ping scan only Dont ping TCP SYN Ping TCP ACK ping UDP ping SCTP Init Ping ICMP echo ping ICMP Timestamp ping ICMP address mask ping IP protocol ping ARP ping Traceroute Force reverse DNS resolution Disable reverse DNS resolution
Scan all ports Scan top ports Perform a sequential port scan
Version Detection
Operating system detection Attempt to guess an unknown Service version detection Troubleshooting version scans Perform a RPC scan nmap -O [target] nmap -O osscan-guess [target] nmap -sV [target] nmap -sV versiontrace [target] nmap -sR [target]
This cheat sheet was compiled by Steven M. Swafford, and is distributed according to the Creative Commons v3 Attribution License. File version 1.0. More cheat sheets?