###### tags: `hacking tools` `get informations`

# Nmap

$ nmap 8.8.8.8 

8.8.8.8 google DNS 服務器

## 常用端口 掃描

nmap <ip or domain_name> --top-ports <port 數>

- 可以加 options <-A> show All

## Output file

$ nmap <ip or domain_name> -oN

oN -> output normal files

## 腳本掃描

nmap <ip or domainName> --script=./<file router> 

e.g. nmap ecampus.nqu.edu.tw --script=./brupt.nse -oN ecampusDNS




## Fake MAC address

- 了解自己

    nmap -iflist 


self MAC is 08:00:27:95:BD:54

## 開掃


- Take advantage of [wireshark](/7x6CArA3S-SxpATt0trA2Q)

to select eht0 network card

to check that wireshark capture packets

Now, we need to fake my mac 嘿嘿

- 把MAC set 全部69


- Output

### 整合 (ip,port,mac) snoof
-Resoule

## ICMP
- internet control message protocol

ping host 

use ICMP to know whether the target host up or down

nmap -sn

-sn (ping scan

## ARP
- address resolution protocol )


## Fake the ip address and sourse port

- 讓對手很迷茫 XD
- -F (quickly scan 100 prot
- -O (OS detection
- -g/--source-port
- 

- Result

## Idle scan

- idipseq
- script for idle scan (to find out idle hosts )

https://nmap.org/nsedoc/scripts/ipidseq.html


![Uploading file..._ft2gx2adl]()


-Result


## Sample


- options
- -n (Never do resolution
- -e (Use specified interface