Security tool · ports
nmap
The classic network scanner. Service/version detection, NSE scripts, and OS fingerprinting. Slow but authoritative.
Overview
Where nmap fits
The classic network scanner. Service/version detection, NSE scripts, and OS fingerprinting. Slow but authoritative.
Detection-first use
Start with the least intrusive template that can distinguish your hypothesis from a normal response. Preserve raw output and a negative control.
Install
Installation references
Install with aptAuthorization required
sudo apt install -y nmap- Positive signal
- Tool-specific output that supports the stated hypothesis.
- Negative control
- No result, or identical behavior against a known-safe control.
- Intrusiveness
- Review flags and target scope before execution.
Install with brewAuthorization required
brew install nmap- Positive signal
- Tool-specific output that supports the stated hypothesis.
- Negative control
- No result, or identical behavior against a known-safe control.
- Intrusiveness
- Review flags and target scope before execution.
Test safely
Command templates
Service + default scriptsAuthorization required
Populate placeholders only with assets that are explicitly in scope.
nmap -sV -sC -oA {output} {host}- Positive signal
- Tool-specific output that supports the stated hypothesis.
- Negative control
- No result, or identical behavior against a known-safe control.
- Intrusiveness
- Review flags and target scope before execution.
Fast all-portsAuthorization required
Populate placeholders only with assets that are explicitly in scope.
nmap -p- --min-rate 5000 -T4 {host}- Positive signal
- Tool-specific output that supports the stated hypothesis.
- Negative control
- No result, or identical behavior against a known-safe control.
- Intrusiveness
- Review flags and target scope before execution.
Related
Continue the workflow
Sources
Attribution and verification
Version history: normalized permanent page created 2026-08-20. Upstream activity and popularity are separate signals and do not establish tool safety.