Nmap and Network Scanning

2.

Introduction to Network Scanning

2.1.

Purpose of Network Scanning

2.1.1.

Security Auditing

2.1.1.1.

Vulnerability Assessment

2.1.1.2.

Security Posture Evaluation

2.1.2.

Network Inventory and Management

2.1.2.1.

Asset Discovery

2.1.2.2.

Service Cataloging

2.1.2.3.

Network Mapping

2.1.3.

Vulnerability Identification

2.1.3.1.

2.1.3.2.

Outdated Services

2.1.3.3.

Misconfigurations

2.1.4.

Reconnaissance for Penetration Testing

2.1.4.1.

Information Gathering

2.1.4.2.

Attack Surface Mapping

2.1.5.

Compliance Verification

2.1.5.1.

Policy Enforcement

2.1.5.2.

Regulatory Requirements

2.2.

Types of Network Scans

2.2.1.

2.2.1.1.

Live Host Detection

2.2.1.2.

Network Range Scanning

2.2.2.

2.2.2.1.

TCP Port Scanning

2.2.2.2.

UDP Port Scanning

2.2.2.3.

Service Port Identification

2.2.3.

Service Enumeration

2.2.3.1.

Service Version Detection

2.2.3.2.

Service Configuration Analysis

2.2.4.

Operating System Fingerprinting

2.2.4.1.

Active OS Detection

2.2.4.2.

Passive OS Detection

2.2.5.

Vulnerability Scanning

2.2.5.1.

Known Vulnerability Detection

2.2.5.2.

Configuration Weakness Identification

2.2.6.

Banner Grabbing

2.2.6.1.

Service Banner Collection

2.2.6.2.

Version Information Extraction

2.3.

Legal and Ethical Considerations

2.3.1.

Authorized vs Unauthorized Scanning

2.3.1.1.

Written Permission

2.3.1.2.

Scope Definition

2.3.2.

Understanding Scope and Rules of Engagement

2.3.2.1.

Target Networks

2.3.2.2.

Excluded Systems

2.3.2.3.

Time Restrictions

2.3.3.

Potential for Service Disruption

2.3.3.1.

Scan Impact Assessment

2.3.3.2.

Resource Consumption

2.3.4.

Privacy and Data Protection Laws

2.3.4.1.

GDPR Compliance

2.3.4.2.

Local Privacy Regulations

2.3.5.

Reporting and Documentation

2.3.5.1.

Scan Results Documentation

2.3.5.2.

Vulnerability Reporting

2.3.5.3.

Remediation Recommendations

Previous

1. Fundamentals of Network Communication

Go to top

Next

3. Nmap Fundamentals