Security tool · ports

nmap

The classic network scanner. Service/version detection, NSE scripts, and OS fingerprinting. Slow but authoritative.

portsscanservicescriptsclassic
Stable IDtool:nmapLast updatedLast verifiedLegacy review pendingProvenanceSource-linked

Where nmap fits

The classic network scanner. Service/version detection, NSE scripts, and OS fingerprinting. Slow but authoritative.

Detection-first use

Start with the least intrusive template that can distinguish your hypothesis from a normal response. Preserve raw output and a negative control.

Installation references

Install with aptAuthorization required
sudo apt install -y nmap
Positive signal
Tool-specific output that supports the stated hypothesis.
Negative control
No result, or identical behavior against a known-safe control.
Intrusiveness
Review flags and target scope before execution.
Install with brewAuthorization required
brew install nmap
Positive signal
Tool-specific output that supports the stated hypothesis.
Negative control
No result, or identical behavior against a known-safe control.
Intrusiveness
Review flags and target scope before execution.

Command templates

Service + default scriptsAuthorization required

Populate placeholders only with assets that are explicitly in scope.

nmap -sV -sC -oA {output} {host}
Positive signal
Tool-specific output that supports the stated hypothesis.
Negative control
No result, or identical behavior against a known-safe control.
Intrusiveness
Review flags and target scope before execution.
Fast all-portsAuthorization required

Populate placeholders only with assets that are explicitly in scope.

nmap -p- --min-rate 5000 -T4 {host}
Positive signal
Tool-specific output that supports the stated hypothesis.
Negative control
No result, or identical behavior against a known-safe control.
Intrusiveness
Review flags and target scope before execution.

Continue the workflow

Attribution and verification

Version history: normalized permanent page created 2026-08-20. Upstream activity and popularity are separate signals and do not establish tool safety.