SANS Pen Test Cheat Sheet: Nmap v1.1

October 8, 2013

Whenever we attend information security conferences like DerbyCon, ShmooCon, or any of the many BSides we support, we always take SANS Pen Test Cheat Sheets with us and everyone that comes by the booth takes a few for themselves and their colleagues back at the office.

So... we have made them available for you to download, print, and share with others.

Ed Skoudis and the fine folks at Counter Hack have put together a nifty Nmap cheat sheet covering some of the most useful options of everyone's favorite general-purpose port scanner, Nmap. And, with its scripting engine, Nmap can do all kinds of wonderful things for security professionals.

Please check out the updated cheat sheet below. Even if you are an experienced attacker, it might cover a tip or trick that's new and useful to you.

Oh... we just made something that we think is pretty helpful. Here is a desktop wallpapers, in multiple sizes, based on the Nmap Cheat Sheet for you to download and use.

(Click on the image for full-sized version to download)

NMap_1

NMap_2

NMap_3

Learn how to use Nmap and penetration testing methods, techniques, and tools in SANS SEC560: Network Penetration Testing and Ethical Hacking.

-Ed Skoudis.
Follow @edskoudis
SANS Fellow
Counter Hack Challenges Founder

Related Content

Penetration Testing and Ethical Hacking

HTTP Request Smuggling: Abusing Reverse Proxies

HTTP request smuggling is a special web application attack that tries to exploit differences between web servers and their reverse proxies.

Christopher Elgee

Penetration Testing and Ethical Hacking

Modifying Android Apps: A SEC575 Hands-on Exercise, Part 2

Introduction In the last installment of this article, we looked at the IsItDown application, and how it is designed not to run in the Android Emulator, and to include a super-annoying banner ad. We showed how the Apktool utility can be used to decompile an Android APK file, and how we can evaluate...

Penetration Testing and Ethical Hacking

Modifying Android Apps: A SEC575 Hands-on Exercise, Part 1

Introduction As a security professional, I'm called on to evaluate the security of Android applications on a regular basis. This evaluation process usually takes on one of two forms: Evaluate app security from an end-user perspectiveEvaluate app security from a publisher perspective While there is...