🖊️ Author: Nairuz Abulhul

🌐 Blog: R3dbuck3t

Table of Contents

Tools

• Nmap
• Masscan

TCP Scans

Nmap

Host Discovery with no port scan using the (sn) flag

 **nmap -sn 192.168.0.0/24** 

**nmap -v -sn 10.11.1.1-254 -oG ping-sweep.txt**

<aside> 💡 The -oG switch saves the scan results in an easy manageable format that can be used with grep

</aside>

Quick TCP scan for 1000 ports

**sudo nmap -Pn -sS -p1-1000 10.10.10.77**

Quick UDP scan for 1000 ports

**sudo nmap -Pn -sU -p1-1000 10.10.10.77 -v** 

Filter the list to get the IP addresses

**cat full_scan_file  | awk '/Nmap scan/{gsub(/[()]/,"",$NF); print $NF > "nmap_scanned_ips"}'**