Nmap and Network Scanning

  1. Service and Version Detection
    1. Importance of Service Enumeration
      1. Service Identification
        1. Running Applications
          1. Service Versions
          2. Security Assessment
            1. Vulnerability Mapping
              1. Configuration Analysis
              2. Network Documentation
                1. Service Inventory
                  1. Asset Management
                2. Version Detection (-sV)
                  1. Service Version Probing
                  2. Version Detection Process
                    1. Initial Port Scan
                      1. Service Probing
                        1. Response Analysis
                          1. Version Matching
                          2. Service Detection Database
                            1. nmap-service-probes File
                              1. Probe Definitions
                                1. Match Patterns
                                  1. Service Signatures
                                  2. Version Intensity Control
                                    1. --version-intensity Levels
                                      1. Level 0 (Light)
                                        1. Level 9 (Comprehensive)
                                        2. Intensity Trade-offs
                                          1. Speed vs Accuracy
                                            1. Stealth vs Thoroughness
                                          2. Version Detection Techniques
                                            1. NULL Probe
                                              1. Generic Probes
                                                1. Specific Service Probes
                                                  1. SSL/TLS Probing
                                                  2. Service Tunneling Detection
                                                    1. SSL-Wrapped Services
                                                      1. SSH Tunneling
                                                        1. HTTP Tunneling
                                                        2. RPC Service Scanning (-sR)
                                                          1. RPC Program Identification
                                                            1. Portmapper Queries
                                                              1. RPC Version Detection
                                                              2. Version Detection Output
                                                                1. Service Names
                                                                  1. Version Numbers
                                                                    1. Product Information
                                                                      1. Additional Details
                                                                        1. CPE Identifiers

                                                                      Previous

                                                                      5. Core Port Scanning Techniques

                                                                      Go to top

                                                                      Next

                                                                      7. Operating System Detection