Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

initial Nmap target(s)?

I found an older ebook from '2015' titled "Nmap Essentials". So, I was taking a look at that, and after getting ahold of Zenmap, I was going to mess around with that program in some spare time.
 I don't know how much the legal landscape has changed since the writing of the book. It seems to say that although it's generally accepted that scanning internet computers is not a crime, that some sys admins probablly don't like it all too much. I don't want to step on any toes, so as of right now my options are limited to: local host; my router (although the IP=192.168.1.1 doesn't ring any bells); or the free Nmap sponsored site (scanme-nmap-org). Of those three options, or any other descent/discrete ones that you can think of, Which one(s) sound the most exciting and/or stimulating?
Nmap scans can crash services so really I would stick to what I am allowed to do legally. Bug bounties, vulnerable VM and other devices which I own and are on my network. Generally port scanning is considered as going around and checking if doors are locked maybe as knocking on doors to find out if anyone is home. It's something which in the real world can be legally problematic.

Get vulnerable VM from Vulnhub safest thing.
I use nmap regularly to scan the perimeter of the company I‘m working for.
Just want to assure that there are only needed ports open and filtered/firewalled that we really need to open for services, etc.
So I just use it to secure our own stuff. But I read that just using it might violate with terms and conditions of some European ISPs but they don’t pursue it so far.
Try look into HackTheBox, good place to learn and all legal
port scanning isnt illegal, however some port scanning techniques are.
http://sunjester.rf.gd - proxies, logins, scanner results
(Apr 23, 2019 01:18 PM)realsunjester Wrote:  port scanning isnt illegal, however some port scanning techniques are.

@ realsunjester - That tutorial of yours, titled 'Using Nmap to Scan for Proxy Servers' was one of the reads that lead me to take another look at Nmap. That, and memories of sifting through free proxy lists, only to find a bunch of mostly dead proxies.

Thanks for the perspective everyone. I wasn't sure if any laws had drastically changed since several years ago or not. I don't imagine that I'll be doing any off-base port scanning techniques anytime soon - There's still a very long way to go before that ever happens (if & when).
That IP is your gateway/router IP


Possibly Related Threads...
Thread / Author Replies Views Last Post
by potatAug 17, 2016 05:41 PM 3 187 Aug 17, 2016 05:41 PM
Last Post: THC
by aEthern0Sep 1, 2015 04:06 PM 2 2,456 Sep 1, 2015 04:06 PM
Last Post: CyberGuard
by baudoinrMay 27, 2011 03:17 PM 5 73 May 27, 2011 03:17 PM
Last Post: baudoinr