### nmap ###



-------------------------------------------------------------------------------
nmap -p 139,445 --script smb-protocols  192.168.1.10
-- @output
-- | smb-protocols:
-- |   dialects:
-- |     NT LM 0.12 (SMBv1) [dangerous, but default]
-- |     2.0.2
-- |     2.1
-- |     3.0
-- |     3.0.2
-- |_    3.1.1


nmap -nz <host> <port>
nmap -sn # arp host discovery
nmap -sU -p161 --script=snmp-info 192.168.1.11
nmap -sU -p161 --script=snmp-brute 192.168.1.12
Alle SNMP Infos:
nmap -sU -p 161 -sV -sC 192.168.1.13

nmap --script ssl-enum-ciphers -p 631 192.168.1.13



nmap -sU -p 445 adresse/mask                    0.5s
nmap -v -A host                         40s
nmap -v -sS --osscan-guess -O --reason host         40s
nmap -sP adresse/mask

nmap -sP 192.168.139.0/24                    3s
nmap -PU 192.168.20.0/24                     21s
nmap -PU --reason -v -O --osscan-guess 192.168.137.0/24      45s
nmap -sU -p 445 192.168.137.0/24                 3-5s

nmap -sU -p 445 192.168.0.0/16
nmap -sP 192.168.0.0/16 > nmap-192.168.0.0-16.out
nmap -sP -oN nmap-192.168.0.0-16.out 192.168.0.0/16

nmap -T5 -O --osscan-guess -oX nmap-137.xml 192.168.137.0/24     00:30
nmap -PU -T5 -O --osscan-guess -oX nmap-137-PU.xml 192.168.137.0/24  00:24