Network scanning with nmap

nmap or network mapper is a great open-source tool for network scanning and port discovery. The detailed description of nmap is available on its official website. An interesting fact about nmap and its wide ranging applications from the website :p "...It was even featured in twelve movies, including The Matrix Reloaded, Die Hard 4, Girl With the Dragon Tattoo, and The Bourne Ultimatum."

Hoping that this has generated enough curiosity in you, lets focus on the very basic use of nmap in network subnet scanning. Network scanning is useful to detect hosts in the network that are reachable from the server on which nmap is run. It is also useful in security auditing of the servers exposed to internet.

We have a setup of 4 VMs on a local network with each having an IP address. The local network subnet is defined as 10.0.1.1/24 and the IPs in the below images verify this fact.

The goal is to verify that nmap is able to detect all the hosts in the local subnet 10.0.1.1/24. Execute the following command to scan the subnet:
`nmap <subnet.ip>`

It returns a list of hosts present on the subnet. nmap also performs a port scan on the live hosts and returns a list of ports that are open on those hosts.

nmap scanned 256 IP addresses i.e. the whole /24 subnet and found 4 hosts. It also scanned for ports on all hosts and found port 22 open which is the standard port running ssh service.

There are many uses for network scanning. I have used nmap for the following two cases:

To find IP addresses of servers that are dynamically assigned IP addresses by DHCP.
To detect all the running servers in a legacy infrastructure of hundreds of servers.

In conclusion, nmap is a simple yet powerful tool to scan subnets for running servers. It is also an important tool in security auditing. It gives information about all the open ports which can make servers vulnerable to various cyber-attacks. Use it wisely and make your systems more secure.

Comments

CRIF HighMark Credit Report Application Process

As per the RBI circular of 2017, you are entitled to get one free credit report every calendar year from each credit bureaus in India. CRIF HighMark is one of the four credit bureaus in India. This article will focus on creating a new account and getting your yearly free credit report. Visit the official website of CRIF HighMark https://www.crifhighmark.com/your-credit-score In the next screen, click on " Get Your Score Now" Register After registering, follow the below steps: Enter Personal Details Full Name DOB Email ID Mobile Number Gender Father's Name or Spouse Name Identification PAN or UID necessary Rest optional Communication Address CAPTCHA Review Terms of Use and Click Submit Choose free report Click " No Thanks, Take me to my FREE report " below the Upgrade me button. You will receive a confirmation email with your username and password and activation link. Click on activation link to...

My Entry into the World of Credit Cards

After joining my job in June 2018, my salary account was opened in ICICI Bank. During the account opening process, I was offered a Life Time Free (LTF) credit card. Simply put, this was my first chance to get into the credit world without any extra hassle because first of all, neither was I aware of the concept of credit scores nor I had any credit history and secondly, I was just curious about credit cards after seeing of my father use his credit cards with extra caution and the monthly event of credit card bill payment that used to happen at my home. And in that sudden moment of joy, I made my first mistake in the credit world. Representative Image (Source: https://jessepollak.github.io/card/) Now if your guess is that I started spending crazy amounts of money which I couldn't repay, then you are WRONG! I am a miserly person. Money doesn't leave my hands and in general, my credit utilization has never exceeded 5% of my credit limit. So coming back to my first mis...

Generate Large Files in Linux using dd

The programming community often requires large files for stress testing programmes. For example, sometimes such files are required to check the response time of certain programme or testing request handling capacity of servers. Many times, it does not matter what the contents of the file are, however, it is often difficult to find such large files when the need arises. Linux provides us a fast, efficient way of generating such huge files through simple command line options. For the purposes of this demo, I am using Ubuntu 16.04 and 18.04 linux distros. Ubuntu provides dd command to create such huge files in a matter of seconds. A typical dd command to create a 1 GB file is given below. dd if=/dev/zero of=big_file.txt count=1024 bs=1048576 parameters of dd: if - input file from which the content is read of - output file where the content is written count - number of blocks in output file bs - number of bytes in each block The above command creates a file named big_file.txt...

Shodh for Truth

Search This Blog