Nmap Options
-PE: Quickly check if host is up.
-sn: Disable port scanning (host discovery).
-n: Disables DNS resolution (checks IP online without looking up hostnames).
-O: OS detection.
-A: OS detection, Version detection, Script scanning, traceroute.
-sV: Service detection (banner info, version).
-vV: Provides verbose output.
-sC: Scan with default scripts for additional info gathering.
--min-rate=5000: Ensures scan sends at least 5k packets per second.
nmap --script smb-enum-shares.nse -p 445 (ip): List shares and their properties.
To see scripts starting with X: ls /path/X
To execute script with script tracing: sudo nmap -script=smb-os-discovery -script-trace target_ip
To enumerate the SMB share files: sudo nmap -script=smb-enum-shares target_ip
Vulnerability... Continue reading "Nmap, Netcat, and Metasploit Commands Cheat Sheet" »