Um guia para a digitalização de rede sem gordura

Nmap® Cookbook

The fat-free guide to network scanning

2

Nmap® Cookbook

The Fat-free Guide to Network Scanning

Copyright © 2010 Nicholas Marsh

All rights reserved.

ISBN: 1449902529

EAN-13: 9781449902520

www.NmapCookbook.com

BSD® is a registered trademark of the University of California, Berkeley

CentOS is property of CentOS Ltd.

Debian® is a registered trademark of Software in the Public Interest, Inc

Fedora® is a registered trademark of Red Hat, Inc.

FreeBSD® is a registered trademark of The FreeBSD Foundation

Gentoo® is a registered trademark of The Gentoo Foundation

Linux® is the registered trademark of Linus Torvalds

Mac OS X® is a registered trademark of Apple, Inc.

Windows® is a registered trademark of Microsoft Corporation

Nmap® is a registered trademark of Insecure.Com LLC

Red Hat® is a registered trademark of Red Hat, Inc.

Ubuntu® is a registered trademark of Canonical Ltd.

UNIX® is a registered trademark of The Open Group

All other trademarks used in this book are property of their respective owners. Use

of any trademark in this book does not constitute an affiliation with or endorsement

from the trademark holder.

All information in this book is presented on an “as-is” basis. No warranty or

guarantee is provided and the author and/or publisher shall not be held liable for

any loss or damage.

3

4

Contents at a Glance

Introduction....................................................................................... 15

Section 1: Installing Nmap .................................................................. 19

Section 2: Basic Scanning Techniques .................................................. 33

Section 3: Discovery Options .............................................................. 45

Section 4: Advanced Scanning Options................................................ 65

Section 5: Port Scanning Options ........................................................ 79

Section 6: Operating System and Service Detection ............................. 89

Section 7: Timing Options .................................................................. 97

Section 8: Evading Firewalls .............................................................. 115

Section 9: Output Options ................................................................ 127

Section 10: Troubleshooting and Debugging...................................... 135

Section 11: Zenmap.......................................................................... 147

Section 12: Nmap Scripting Engine (NSE)........................................... 161

Section 13: Ndiff .............................................................................. 171

Section 14: Tips and Tricks................................................................ 177

Appendix A - Nmap Cheat Sheet ....................................................... 187

Appendix B - Nmap Port States ......................................................... 191

Appendix C - CIDR Cross Reference ................................................... 193

Appendix D - Common TCP/IP Ports .................................................. 195

5

6

Table of Contents

Introduction....................................................................................... 15

Conventions Used In This Book ............................................................. 18

Section 1: Installing Nmap .................................................................. 19

Installation Overview ............................................................................ 20

Installing Nmap on Windows ................................................................ 21

Installing Nmap on Unix and Linux systems .......................................... 25

Installing Precompiled Packages for Linux ........................................ 25

Compiling Nmap from Source for Unix and Linux ............................ 26

Installing Nmap on Mac OS X ................................................................ 29

Section 2: Basic Scanning Techniques .................................................. 33

Basic Scanning Overview....................................................................... 34

Scan a Single Target............................................................................... 35

Scan Multiple Targets ............................................................................ 36

Scan a Range of IP Addresses ................................................................ 37