Nmap Tutorial to find Network Vulnerabilities
About this video
He introduces Nmap (Network Mapper) as a free scanning and enumeration tool for Windows, macOS, and Linux, starting with a host-discovery scan of his 10.7.1.0/24 network that he says found 15 live hosts in 2.71 seconds instead of pinging 254 addresses manually. He explains port scanning through the TCP three-way handshake (SYN, SYN-ACK, ACK), contrasting a full TCP connect scan (-sT) with a stealth / SYN scan (-sS) that abandons the handshake to try to avoid intrusion detection, and verifies both behaviours by capturing the traffic in Wireshark. He then demonstrates OS detection (-O), the aggressive -A scan combining OS detection, version detection, script scanning, and traceroute on Linux and Windows Server hosts, decoy scans (-D) to obscure the source, timing templates, and the Nmap Scripting Engine, running the vuln script category against a deliberately vulnerable VulnHub box to surface CVEs. He frames this as an overview for scanning and enumeration, not a deep dive.
Key takeaways
- nmap -sP-style host discovery sweeps a whole /24 network far faster than pinging each address manually
- -sT completes the TCP three-way handshake; -sS (SYN/stealth) scan leaves it half-open to be less intrusive
- -O enables OS detection and -A combines OS, version detection, script scanning, and traceroute
- -D decoy scans add fake source IPs so the real scanner is harder to pick out of traffic logs
- The Nmap Scripting Engine’s vuln category checks hosts for known CVEs that could then be exploited
Episode details: published July 9, 2020 · 17:09 long. Summary written by Self Growth Videos from the episode itself. Business results and any income figures mentioned are NetworkChuck’s own claims, shared for education — they are not typical or guaranteed.
← Previous: FREE CCNA // What is a Network? // Day 0 · Next: What is a SWITCH? // FREE CCNA // Day 1 →
All NetworkChuck videos · NetworkChuck profile · NetworkChuck on YouTube
