+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: NMAP Tutorial (WARNING: Heavy on images) (/showthread.php?tid=3047)
NMAP Tutorial (WARNING: Heavy on images) - Austral Hacker - Dec 10, 2007
Ok, people, I present to you the NMAP tutorial:
So... let's say that you donwloaded NMAP in one of its latest versions, if you didn't then go get it immediately! And come back only when you have it.
When you start/launch/whatever you call itNMAP you should see a screen like this one here:
[img]http://img518.imageshack.us/img518/2295/nmap1fx3.jpg[/img]
You will quickly get used to this Interface, its really user friendly:
(1) IMPORTANT: This is the most important part of the interface, here youwill type the IP of the target, or a Web Page Adress, for you geeks out there it works both on IPv4 protocol and in IPv6 protocol.
(2) This is the type of scan you want to make, unless you are hacking
something really hardcore like government or big company shit then leave it as intensive, no one will notice. This also defines the speed and the agression it will use until it checks if a port is open or closed or if its using an specific OS
(3)This is where you'll set the commands to run in the process of scaning, leave it be, if you really want to change this use the wizard and create your own scan type so you can use later.
(4)Well, here you'll see displayed all the information you get. Well see that in just a second.
So lets go ahead and enter what we know, i'll be scanning a pretty crappy japanese page that i found 20 minutes ago when i wake up, i dont know what it is about because i dont read japanese, i only know it had its CGI-BIN wide open and withouth protection so i checked all their stuff... Its still default security, so its not really a challenge :)
[img]http://img502.imageshack.us/img502/1695/nmap2wl5.jpg[/img]
(5) As you see i've entered the URL for that jap site
(6&7) This will remain the same, though you must know that you can change them if you want to
(8) With all set lets go ahead and click on SCAN
(9) You'll see the "Scanning..." text under host
(10) You should see and introductory text like this and some seconds later the scan per se will begin.
Now the scan is running, so just sit back and smoke a cigarrete (HEY ITS BAD FOR YOUR HEALTH DON'T DO IT) or listen to some music (BUT NOT TO LOUD, THATS BAD FOR YOUR HEALTH TOO)
[img]http://img152.imageshack.us/img152/9456/nmap3ow6.jpg[/img]
Luckily for us this site has many ports wide open so you can see perfectly how the scan shows them AT FIRST. (11)
Now, since this could take a while specially if you are running it slowly to pass undetected every couple of minutes you'll see a percentage of the scan completed, just to let you know NMAP is still running. (12)
[img]http://img440.imageshack.us/img440/593/nmap4cd8.jpg[/img]
(13) VOILA! The ports that are open or filtered, their protocol (tipically TCP) and their main function and even the version of the software it is running, so you can search for your exploiting pleasure!
(14) And THIS is what i love about NMAP, it tells you the OS of the host! Well see this just now in depth...
[img]http://img527.imageshack.us/img527/8878/nmap5dh1.jpg[/img]
Now, let see, oh yes, the OS! Look at this! its wonderful! The perfect tool for a hacker, to know your enemy! And knowledge is power!
(15) A nice image of the OS, in this case a relative of LINUX
(16) A graphic representing the average difficulty to hack into this, in this case a bomb, in safer systems you can see a Security Box, in the easiest of them a piece of cake (literally!)
(17) A brief report of the scan
(18) The EXACT version of the operative system (if found) an the accuracy (if found)
[img]http://img230.imageshack.us/img230/208/nmap6ke1.jpg[/img]
Now for you exploiter out there, click on the services (19) tab
(20) Look for the port you want to exploit (sendmail here)
(21)VOILA again! All the info on the sofware running on that port including the version its using (2010 here)
- Austral Hacker - Dec 10, 2007
Buena suerte en su hackeo ;)
- Stamgren - Dec 10, 2007
iMucho gracias!
- nicoleman - Dec 10, 2007
exactly what i wanted😎 that is big help for every noob
i finally got it....phew......
- Kuroda_Shun - Dec 10, 2007
Brilliant post. Kudos
- sup3r501d13r - Dec 10, 2007
Nice tutorial man! Very informatice! I use ZenNMAP
- nicoleman - Dec 10, 2007
i cant do scans for anything...even tried the website you did and it said'failed to open device eth4 QUITTING!'..any ideas?
- sup3r501d13r - Dec 10, 2007
Is your NIC on? Is a cable unplugged.
- nicoleman - Dec 10, 2007
sup3r501d13r Wrote:Is your NIC on? Is a cable unplugged.think its vistas problem, tried it with xp and it worked~
- sup3r501d13r - Dec 10, 2007
That's vista for you, problem after problem. There will be a patch in February that is expected to fix everything.
- nicoleman - Dec 10, 2007
ha yea a big dissapointment not even stable. only thing good bout it is the graphics
- Austral Hacker - Dec 10, 2007
Nah.. it burns RAM like hell... win XP is better at this moment... Wait until Vista gets SP2 (or maybe even 3)
- sup3r501d13r - Dec 10, 2007
It should be a lot better after the update, from what I have heard. I'm getting a laptop in a few weeks. It will have Vista on it (not by my choice). But the salesman said it will get better. Plus the Geek Squad is going to partition my hard drive for me for free so I will have a dual boot with both Windows and Ubuntu. And with it partitioned, both Operating systems can share programs and files.
- nicoleman - Dec 10, 2007
well my vista comp has 3 gigs of ram so its not a problem...
and 1 thing... why do my scan results always show 0 hosts up? ive tried a couple of sites already. only worked once for my school web with 1 host...which had a vault icon.
- trx07 - Apr 30, 2008
dude its still not working :(
when ever i scan any thing its just says scan failed, i get some open ports, like a lot of them but near the end it goes bang! and its over... :(