Nmap Cheat Sheet
Disclaimer – This is a basic Nmap cheat sheet created to help people with exams. It is not for the
purposes of hacking public IP’s. Furthermore, there are far better cheat sheets out there for that.
Ping Sweep
sudo nmap -sP 192.168.0.1-24
Ping Sweep No DNS
sudo nmap -sP 192.168.0.1-24 -n
TCP Scan All Ports
sudo nmap -sT -p0- 192.169.0.1
UDP Scan All Port
sudo nmap -sU -p0- 192.168.0.1
Version and Operating System Detection
sudo nmap -sV -O -p0- 192.168.0.1
XMAS Scan
sudo nmap -sX -p0- -Pn 192.168.0.1
Locate Nmap Scripts
sudo locate *.nse | grep string
Update Nmap Scripts
sudo nmap --script-updatedb
Banner Grab
sudo nmap --script=banner 192.168.0.1
SSL Certificate
sudo nmap --script ssl-cert -p 443 domain.com
SSL Ciphers
sudo nmap -sV --script ssl-enum-ciphers -p 443
DNS Zone Transfer
sudo nmap --script dns-zone-transfer.nse --script-args dns-zone-
transfer.domain=zonetransfer.me -p53 nsztm1.digi.ninja
SMB Share Enumeration
sudo nmap --script smb-enum-shares.nse -p445 192.168.0.1
SMB User Enumeration
sudo nmap --script smb-enum-users.nse -p445 192.168.0.1
