Commands matching nmap sorted by votes

Commands matching nmap (86)

sorted by

Backup a file with a date-time stamp

"infix" version in bash (4.x+) Remove -v to make it silent. BTW: The OP forgot to use "cat" and "nmap" ;-) I had a good laugh though. Show Sample Output
This is sample output - yours may be different.
```
$ buf a.txt
`a.txt' -> `a-20101215_104638.txt'
$ buf a.txt.gz
`a.txt.gz' -> `a-20101215_104647.txt.gz'
```
0

buf() { f=${1%%.*};e=${1/$f/};cp -v $1 $f-$(date +"%Y%m%d_%H%M%S")$e;}

unefunge · 2010-12-15 09:50:04 0
sort a list of comma separated numbers: sort_csn

"sort_csn" is a function to sort a comma separated list of numbers. Define the the function with this: sort_csn () { echo "${1}" | sed -e "s/,/\n/g"| sort -nu | awk '{printf("%s,",$0)} END {printf("\n")}' | sed -e "s/,$//"; } Use the function like this: sort_csn 443,22,80,8200,1533,21,1723,1352,25 21,22,25,80,443,1352,1533,1723,8200 One example where this is useful is when port scanning with nmap and getting a list of open ports in random order. If you use Nessus, you may need to create a scan policy for that set of specific ports and it is clearer to read with the port numbers in ascending order (left to right). Caveat: no spaces in the comma separated list (just number1,number2,number3,etc). A variation of this to sort a comma separated list of strings: sort_css () { echo "${1}" | sed -e "s/,/\n/g"| sort -u | awk '{printf("%s,",$0)} END {printf("\n")}' | sed -e "s/,$//"; } usage: sort_css apples,pears,grapes,melons,oranges apples,grapes,melons,oranges,pears Show Sample Output
This is sample output - yours may be different.
```
$ sort_csn () { echo "${1}" | sed -e "s/,/\n/g"| sort -nu | awk '{printf("%s,",$0)} END {printf("\n")}' | sed -e "s/,$//"; }
$ sort_csn 443,22,80,8200,1533,21,1723,1352,25
21,22,25,80,443,1352,1533,1723,8200
```
0

sort_csn () { echo "${1}" | sed -e "s/,/\n/g"| sort -nu | awk '{printf("%s,",$0)} END {printf("\n")}' | sed -e "s/,$//"; }

mpb · 2011-01-26 15:18:08 2

Nmap find open TCP/IP ports for a target that is blocking ping

Change the IP address from 127.0.0.1 to the target machines ip address. Even if the target has ICMP (ping) blocked, it will show you what ports are open on the target. Very handy for situations where you know the target is up and online but wont respond to pings. Show Sample Output

nmap -sT -PN -vv <target ip>

Richie086 · 2011-07-22 02:37:19 0

List services running on each open port
This is sample output - yours may be different.
0

nmap -T Aggressive -A -v 127.0.0.1 -p 1-65000

nzimas · 2011-10-30 15:16:35 0

Check a port's state on a given host

Check to see if a port is open or closed on a given host. Show Sample Output

checkport() { sudo nmap -sS -p $1 $2 }

peterRepeater · 2011-12-13 11:46:15 1

A list of IPs (only) that are online in a specific subnet.

Often you want to nmap a list of IPs using the -iL flag. This is an easy way to generate a list of IPs that are online in a specific subnet or IP range (192.168.1.100-110). Show Sample Output
This is sample output - yours may be different.
```
192.168.1.1
192.168.1.43
192.168.1.67
192.168.1.100
192.168.1.101
192.168.1.104
```
0

nmap -sP 192.168.1.0/24 | awk "/^Host/"'{ print $3 }' |nawk -F'[()]' '{print $2}'

cantormath · 2011-12-31 15:50:22 0
Get list of servers with a specific port open
This is sample output - yours may be different.
0

nmap -sT -p 80 --open 192.168.1.1/24

smiles · 2012-03-13 01:43:59 0
Find resolvable hosts in subnet

Nmap will list all IP's in the target specified, can specify subnet or range of IP addresses. It will attempt to resolve all IP's listed. No packets sent to target only generates DNS queries. Show Sample Output
This is sample output - yours may be different.
```
Starting Nmap 5.61TEST5 ( http://nmap.org ) at 2012-05-30 10:47 EST
Nmap scan report for syd01s04-in-f0.1e100.net (74.125.237.0)
Nmap scan report for syd01s04-in-f1.1e100.net (74.125.237.1)
Nmap scan report for syd01s04-in-f2.1e100.net (74.125.237.2)
Nmap scan report for syd01s04-in-f3.1e100.net (74.125.237.3)
Nmap scan report for syd01s04-in-f4.1e100.net (74.125.237.4)
```
0

nmap -sL 74.125.237.1/24

the_wanderer · 2012-05-30 00:51:20 0

scan subnet for used IPs

Does a ping scan on the local subnet and returns the IPs that are up Show Sample Output

nmap -T4 -sn 192.168.1.0/24

drewbled · 2012-06-19 17:07:24 0

Ping sweep without NMAP

This version combines the best of the other suggestions and adds these features: 1. It scans a /16 subnet 2. It is very fast by running the ping commands in the background, running them in parallel. 3. Does not use the "-W" option as that's not available in older ping versions (I needed this for OS X 10.5)
This is sample output - yours may be different.
0

prefix="169.254" && for i in {0..254}; do echo $prefix.$i/8; for j in {1..254}; do sh -c "ping -m 1 -c 1 -t 1 $prefix.$i.$j | grep \"icmp\" &" ; done; done

tempelorg · 2012-07-25 12:07:15 0
Getting a list of active addresses in your own network.

You can substitute 10.10.10.* by your own network. Or whatever nmap accepts, inlcluding submask. Show Sample Output
This is sample output - yours may be different.
```
10.10.10.2
10.10.10.4
10.10.10.20
10.10.10.130
10.10.10.200
10.10.10.254
```
0

nmap -n -sP -oG - 10.10.10.*/32 | grep ": Up" | cut -d' ' -f2

insaneisnotfree · 2012-08-13 15:37:21 5

Look for free ip's in a given /24 subnet.

The command will make it easy to determine free IP ranges in a crowded sub-net. Show Sample Output

SUBNET="192.168.41" ; diff -y <(nmap -sP -n ${SUBNET}.0/24 | grep ${SUBNET}. | awk '{print $5}' | sort -t"." -k4 -n) <(for i in $(seq 1 254); do echo ${SUBNET}.$i; done)

michel_p · 2012-08-28 09:11:18 0

Show alive host on network
This is sample output - yours may be different.
0

nmap -sP 192.168.0.* | grep Host | tr "(" ")" | cut -d\) -f2

szimbaro · 2013-02-27 12:40:45 0
Get a list of all valid ip address in a local network?

you need to have nmap installed sudo apt-get install nmap -y sudo yum install nmap -y Show Sample Output
This is sample output - yours may be different.
```
Starting Nmap 6.40 ( http://nmap.org ) at 2014-07-08 09:37 BST
Nmap scan report for 192.168.1.50
Host is up (0.00012s latency).
Nmap scan report for pedromsluz-Z97-HD3.lan (192.168.1.84)
Host is up (0.00013s latency).
Nmap scan report for 192.168.1.100
Host is up (0.00047s latency).
```
0

nmap -sP 192.168.1.*

narven · 2014-07-08 08:39:14 0
nmap scan hosts for IP, MAC Address and device Vendor/Manufacturer

In the field, I needed to script a process to scan a specific vendor devices in the network. With the help of nmap, I got all the devices of that particular vendor, and started a scripted netcat session to download configuration files from a tftp server. This is the nmap loop (part of the script). You can however, add another pipe with grep to filter the vendor/manufacturer devices only. If want to check the whole script, check in http://pastebin.com/ju7h4Xf4 Show Sample Output
This is sample output - yours may be different.
```
10.0.0.1 AA:BB:CC:DD:EE:FF (Vendor)
10.0.0.2 BB:CC:DD:EE:FF:AA (Manufacturer)
10.0.0.3 FF:FF:FF:FF:FF:FF (Unknown)
```
0

nmap -sP 10.0.0.0/8 | grep -v "Host" | tail -n +3 | tr '\n' ' ' | sed 's|Nmap|\nNmap|g' | grep "MAC Address" | cut -d " " -f5,8-15

jaimerosario · 2014-12-26 18:31:53 0
Scan all available IP addresses on network
This is sample output - yours may be different.
0

nmap -sP $(ip -o addr show | grep inet\ | grep eth | cut -d\ -f 7)

richihiatus · 2015-04-03 21:29:59 0
Using NMAP to check if a port is open or close
This is sample output - yours may be different.
0

nmap -n 10.0.0.50 | grep udp | cut -d":"-f3>> test02

h_kaur2 · 2015-11-13 13:28:35 0
Using NMAP to check if a port is open or close
This is sample output - yours may be different.
0

nmap -n 10.0.0.50 | grep udp | cut -d":"-f3>>

h_kaur2 · 2015-11-13 13:31:14 0
Dump top 10 ports tcp/udp from nmap

To be used with other port scanners and or for help with iptables --dport 1000:2000 style expansion Show Sample Output
This is sample output - yours may be different.
```
7,9,13,21-23,25-26,37,53,79-81,88,106,110-111,113,119,135,139,143-144,179,199,389,427,443-445,465,513-515,543-544,548,554,587,631,646,873,990,993,995,1025-1029,1110,1433,1720,1723,1755,1900,2000-2001,2049,2121,2717,3000,3128,3306,3389,3986,4899,5000,5009,5051,5060,5101,5190,5357,5432,5631,5666,5800,5900,6000-6001,6646,7070,8000,8008-8009,8080-8081,8443,8888,9100,9999-10000,32768,49152-49157
```
0

nmap -oA derp --top-ports 10 localhost>/dev/null;grep 'services\=' derp.xml | sed -r 's/.*services\=\"(.*)(\"\/>)/\1/g'

operat0r · 2020-02-06 12:59:24 1
Get newest Nmap source code tarball URL.
This is sample output - yours may be different.
0

curl -Ls https://nmap.org/dist/ | sed -En '/nmap.*tgz/s@^.*href="([^"]+)".*$@https://nmap.org/dist/\1@p' | tail -n1

akanehara · 2017-02-10 05:46:27 0
Scan LAN and get Windows host names
This is sample output - yours may be different.
0

nmap -sn --system-dns 192.168.0.1-253

swarzynski · 2023-06-23 10:50:25 0
nmap check alivr hosts
This is sample output - yours may be different.
0

nmap -sP 192.168.0.1/24

aysadk · 2017-06-07 09:52:11 0
scan local network for SSH-able computers
This is sample output - yours may be different.
0

nmap -sS -p 22 192.168.1.0/24

aysadk · 2017-07-18 12:34:20 0
nmap discorvery network on port 80
This is sample output - yours may be different.
0

nmap -p 80 -T5 -n -min-parallelism 100 --open 192.168.1.0/24

aysadk · 2017-07-18 12:40:52 0
nmap get ip and hostname of scanned networks
This is sample output - yours may be different.
0

nmap -sL 192.168.3.0/24

aysadk · 2017-07-18 13:15:19 0
< 1 2 3 4 >

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Check These Out

Detect illegal access to kernel space, potentially useful for Meltdown detection

Based on capsule8 agent examples, not rigorously tested

Print diagram of user/groups

Parses /etc/group to "dot" format and pases it to "display" (imagemagick) to show a usefull diagram of users and groups (don't show empty groups).

Copy via tar pipe while preserving file permissions (run this command as root!)

It's the same like 'cp -p' if available. It's faster over networks than scp. If you have to copy gigs of data you could also use netcat and the tar -z option in conjunction -- on the receiving end do: # nc -l 7000 | tar -xzvpf - ...and on the sending end do: # tar -czf - * | nc otherhost 7000

Write comments to your history.

A null operation with the name 'comment', allowing comments to be written to HISTFILE. Prepending '#' to a command will *not* write the command to the history file, although it will be available for the current session, thus '#' is not useful for keeping track of comments past the current session.

Virtualbox: setup hardware

where - memory 256 assign 256 Mb RAM - acpi on enable ACPI (mandatory if you use Winfog 2000 - ioapic off disable the IO APIC. Not useful if you use one CPU (on virtual machine or a 32 bit operative system). As ACPI, this switch is mandatory for Winbug 2000 - pae on enable the Phisical Address Extension how to use more than 4Gb of RAM on x86 CPU - hwvirtex on enables hardware virtualization extensions for microprocessors that have this feature (which should be also enabled in the BIOS of the motherboard) - nestedpaging on allows part of the processes of memory management hardware are made directly

Get AWS temporary credentials ready to export based on a MFA virtual appliance

You might want to secure your AWS operations requiring to use a MFA token. But then to use API or tools, you need to pass credentials generated with a MFA token. This commands asks you for the MFA code and retrieves these credentials using AWS Cli. To print the exports, you can use: `awk '{ print "export AWS_ACCESS_KEY_ID=\"" $1 "\"\n" "export AWS_SECRET_ACCESS_KEY=\"" $2 "\"\n" "export AWS_SESSION_TOKEN=\"" $3 "\"" }'` You must adapt the command line to include: * $MFA_IDis ARN of the virtual MFA or serial number of the physical one * TTL for the credentials

total text files in current dir

Adding formatting to an xml document for easier reading

This will indent the input to be more readable. Warnings and messages are not send to STDOUT so you can just use a pipe to create the formatted outputfile, like: $ tidy -i -xml in.xml > out.xml

looking for files not subversioned

En entornos de desarrollos muchas veces se mezclan ficheros y debemos revisar si algo se nos ha quedado fuera del proyecto. Con esta linea de comando busco todos los ficheros que no sean M ( modificados ) para valorar si tengo que agregarlo al repositorio de subversion. Adem?s siempre se me olvida como usar un condicional con awk para una columna :D

Rename files in batch

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)
» commands matching nmap

Commands matching nmap (86) the last day the last week the last month all time sorted by date votes

What's this?

Check These Out

Stay in the loop…

Commands matching nmap (86)

sorted by