nmap-usage

name	nmap-usage
description	Professional nmap scanning techniques and optimization for penetration testing. Use this skill when you need to perform network reconnaissance, port scanning, or service enumeration during authorized security assessments.
version	1.0.0
author	Hackbot Security Team
tags	["reconnaissance","network","scanning","nmap"]
triggers	["scan","port","network","nmap","recon"]
prerequisites	["authorized_target","network_access"]

Nmap Professional Scanning Techniques

Overview

This skill provides advanced nmap scanning techniques optimized for penetration testing engagements.

Timing Optimization

Aggressive Timing (-T4)

Use for fast, reliable scanning on known networks:

nmap -T4 -sS <target>

Stealth Timing (-T2)

Use when avoiding detection is critical:

nmap -T2 -sS -f --data-length 50 <target>

Parallel Scanning

nmap --min-parallelism 100 -p- <target>

Port Selection Strategies

Quick Discovery

nmap --top-ports 100 <target>

Full Port Scan

nmap -p- <target>

Specific Port Ranges

nmap -p 80,443,8080,8443 <target>

Service Detection

Version Detection

nmap -sV --version-intensity 9 <target>

Lightweight Detection

nmap -sV --version-light <target>

OS Detection

Aggressive OS Detection

nmap -O <target>

With Version + Script

nmap -A <target>

Output Formats

XML (for parsing)

nmap -oX report.xml <target>

Grepable

nmap -oG report.gnmap <target>

All Formats

nmap -oA report <target>

Useful NSE Scripts

Vulnerability Scanning

nmap --script vuln <target>