TARGET SPECIFICATION: #目標規(guī)格
Can pass hostnames, IP addresses, networks, etc. #選取主機名，IP，或者網(wǎng)絡
Ex: scanme.nmap.org, microsoft.com/24, 192.168.0.1; 10.0.0-255.1-254
-iL : Input from list of hosts/networks #導入列表中的目標
-iR : Choose random targets #（利用列表中的主機編號）導出任意目標
--exclude : Exclude hosts/networks
--excludefile : Exclude list from file
HOST DISCOVERY: #活躍主機發(fā)掘策略
-sL: List Scan - simply list targets to scan #簡單列表掃描策略
-sn: Ping Scan - disable port scan #僅使用ping命令掃描，不進行端口掃描
-Pn: Treat all hosts as online -- skip host discovery #僅掃描出在線主機
#不對主機進一#步掃描
-PS/PA/PU/PY[portlist]: TCP SYN/ACK, UDP or SCTP discovery to given ports
#使用SYSN/ACK/UDP/SCTP技術(shù)挖掘端口
-PE/PP/PM: ICMP echo, timestamp, and netmask request discovery probes
#使用ICMP echo .timestamp,netmask 請求作為探針
-PO[protocol list]: IP Protocol Ping #使用ip協(xié)議ping指令掃描
-n/-R: Never do DNS resolution/Always resolve [default: sometimes] #選擇是否使用DNS解析
--dns-servers : Specify custom DNS servers
--system-dns: Use OS's DNS resolver
--traceroute: Trace hop path to each host #對路由路徑進行跟蹤
SCAN TECHNIQUES: #掃描策略
-sS/sT/sA/sW/sM: TCP SYN/Connect()/ACK/Window/Maimon scans
-sU: UDP Scan
-sN/sF/sX: TCP Null, FIN, and Xmas scans
--scanflags : Customize TCP scan flags
-sI : Idle scan #使用僵尸主機地址進行掃描
-sY/sZ: SCTP INIT/COOKIE-ECHO scans 、
-sO: IP protocol scan
-b : FTP bounce scan
PORT SPECIFICATION AND SCAN ORDER: #端口掃描策略
-p : Only scan specified ports #掃描特定端口
Ex: -p22; -p1-65535; -p U:53,111,137,T:21-25,80,139,8080,S:9
--exclude-ports : Exclude the specified ports from scanning
-F: Fast mode - Scan fewer ports than the default scan #快速掃描
-r: Scan ports consecutively - don't randomize #連續(xù)端口掃描
--top-ports : Scan most common ports
--port-ratio : Scan ports more common than
SERVICE/VERSION DETECTION:
-sV: Probe open ports to determine service/version info #判斷版本信息
--version-intensity : Set from 0 (light) to 9 (try all probes)
--version-light: Limit to most likely probes (intensity 2)
--version-all: Try every single probe (intensity 9)
--version-trace: Show detailed version scan activity (for debugging)
SCRIPT SCAN: #腳本掃描策略
-sC: equivalent to --script=default
--script=: is a comma separated list of
directories, script-files or script-categories
--script-args=: provide arguments to scripts
--script-args-file=filename: provide NSE script args in a file
--script-trace: Show all data sent and received
--script-updatedb: Update the script database.
--script-help=: Show help about scripts.
is a comma-separated list of script-files or
script-categories.
OS DETECTION: #對系統(tǒng)進行判斷
-O: Enable OS detection
--osscan-limit: Limit OS detection to promising targets
--osscan-guess: Guess OS more aggressively
TIMING AND PERFORMANCE: 對掃描間歇時間進行設(shè)定
Options which take
重慶分公司
重慶分公司
