[TOC] ## 概述 ``` nmap -T4 -A -v -Pn IP #最常用的一種掃描 -T4 #設置時序，越高掃描越快 -A #啟用操作系統檢測，版本檢測，腳本掃描和跟蹤路由 -v #增加詳細級別（使用-vv或更高級別以獲得更好的效果） -Pn #無ping掃描 ``` ## 示例 ### 掃描單個IP ``` root@localhost ~]# nmap 192.168.0.57 Starting Nmap 6.40 ( http://nmap.org ) at 2023-09-27 17:10 CST Nmap scan report for 192.168.0.57 Host is up (0.0000020s latency). Not shown: 985 closed ports PORT STATE SERVICE 22/tcp open ssh 3306/tcp open mysql 5432/tcp open postgresql 5500/tcp open hotline 5901/tcp open vnc-1 6666/tcp open irc 6667/tcp open irc 6668/tcp open irc 6669/tcp open irc 8000/tcp open http-alt 8001/tcp open vcom-tunnel 8081/tcp open blackice-icecap 8082/tcp filtered blackice-alerts 8083/tcp filtered us-srv 8084/tcp filtered unknown Nmap done: 1 IP address (1 host up) scanned in 2.66 seconds ``` ### 掃描主機范圍 ``` nmap 192.168.0.1-50 ``` ### 掃描特定端口范圍 ``` nmap -p 80-100 192.168.0.50 ```