SANS Pen Test Cheat Sheet: Nmap v1.1

October 8, 2013

Whenever we attend information security conferences like DerbyCon, ShmooCon, or any of the many BSides we support, we always take SANS Pen Test Cheat Sheets with us and everyone that comes by the booth takes a few for themselves and their colleagues back at the office.

So... we have made them available for you to download, print, and share with others.

Ed Skoudis and the fine folks at Counter Hack have put together a nifty Nmap cheat sheet covering some of the most useful options of everyone's favorite general-purpose port scanner, Nmap. And, with its scripting engine, Nmap can do all kinds of wonderful things for security professionals.

Please check out the updated cheat sheet below. Even if you are an experienced attacker, it might cover a tip or trick that's new and useful to you.

Learn how to use Nmap and penetration testing methods, techniques, and tools in SANS SEC560: Network Penetration Testing and Ethical Hacking.

-Ed Skoudis.
Follow @edskoudis
SANS Fellow
Counter Hack Challenges Founder

Related Content

Purple Team, Penetration Testing and Ethical Hacking

Shifting from Penetration Testing to Red Team and Purple Team

Penetration Testing to Red Team is mentality. Red Team is "the practice of looking at a problem or situation from the perspective of an adversary".

Jorge Orchilles

Digital Forensics and Incident Response, Cybersecurity and IT Essentials, Industrial Control Systems Security, Purple Team, Open-Source Intelligence (OSINT), Penetration Testing and Ethical Hacking, Cyber Defense, Cloud Security, Security Management, Legal, and Audit

December 8, 2021

Good News: SANS Virtual Summits Will Remain FREE for the Community in 2022

They’re virtual. They’re global. They’re free.

Penetration Testing and Ethical Hacking, Cyber Defense

December 10, 2019

EQL Threat Hunting

The Event Query Language (EQL) is a standardized query language (similar to SQL) to evaluate Windows events. Written by Russ Wolf, EQL is an amazing tool to normalize Windows log events for consistent access and query. In practice, EQL is most effective when working with Windows Event Log and...