Nmap Port Scanning Techniques
Run SYN, TCP connect, UDP, and version scans; read Nmap output; tune timing and avoid detection.
Why Port Scanning Matters
Port scanning reveals which services are running on a target. Every open port is a potential entry point — knowing what is exposed is the first step in both offense and defense.
TCP SYN Scan (Stealth Scan)
The SYN scan (-sS) sends a SYN packet and waits for SYN-ACK without completing the handshake. It is fast, less likely to be logged, and requires root privileges.
# SYN scan (requires root)
sudo nmap -sS 192.168.1.0/24
# Results: open / closed / filteredAll lessons in this course
- Nmap Port Scanning Techniques
- Service and OS Fingerprinting
- Netcat: The Swiss Army Knife
- Network Enumeration Scripting