- Home
- Management
- Investment
- Consulting
- Secure System
- Secure Network
- Secure Program
- Security Plaza
- C-VIP YCN
- Update News
ええコンサルタント > セキュリティプラザ > ネットワークセキュリティ
スキャンツール[nmap]
http://www.nmap.orgは、NMAPのホームとなっておりますので、沢山のドキュメントは入手できます。
NMAPはネットワーク調査ツールおよびセキュリティ/ポート・スキャナとして周知されて、実行の際に、システム管理者の権限は必要になっております。
- ネットワーク上にどんなホストは存在しているのか？
- ホスト上で稼働しているOS名とバージョン
- ホストが提供しているアプリケーション名とバージョン
- どんなファイアウォールが使用されているのか？
namp <スキャンタイプ> <オプション> <ターゲットの指定>
| 引数 | 解説 |
|---|---|
| TARGET SPECIFICATION:hostname, IPaddr, networks | |
| -iL <inputFileName> | a list of hosts or networks |
| -iR <numHosts> | choose random targets |
| --exclude <Hosts> | Exclude hosts/networks |
| --excludefile <exclueFileName> | exclude list from file |
| HOST DISCOVERY | |
| -sL | List Scan: -simply list targets to scan |
| -sP | Ping Scan: -go no further than determining if host is online |
| -P0 | Skip host discovery |
| -PS [portlist] | TCP SYN discoverr to given ports |
| -PA [portlist] | TCP ACK discoverr to given ports |
| -PU [portlist] | TCP UDP discoverr to given ports |
| -PE | ICMP echo request discovery probes |
| -PP | ICMP timestamp request discovery probes |
| -PM | ICMP netmask request discovery probes |
| -n | Never do DNS resolution |
| -R | Always do DNS resolution |
| SCAN TECHNIQUES | |
| -sN | TCP NULL Scan |
| -sS | TCP SYN Scan |
| -sA | TCP ACK Scan |
| -sW | TCP Window Scan |
| -sM | TCP Maimon Scan |
| -sF | TCP FIN Scan |
| -sT | TCP connect() Scan |
| -sX | TCP Xmas Scan |
| -sO | IP Protocol Scan |
| -sl <zombie host> | Idle Scan |
| -b <ftp relay host> | FTP bounce Scan |
| --scanflags <FLAGS> | cumtomiza TCP scan flags |
| PORT SPECIFICATION AND SCAN ORDER | |
| -p <port rangs> | only scan specified ports Ex: -p U:0-1023, T:0-2048 |
| -F | scan only the ports listed in the nmap-service file |
| -r | scan ports consecutively - don't randomize |
| SERVICE/VERSION DETECTION | |
| -sV | probe open ports to determine service/version information |
| --version-light | limit to most likely probes for faster identification |
| --version-all | try every single probe for version detection |
| --version-trace | show detailed version scan activity |
| OS DETECTION | |
| -O | Enable OS detection |
| --osscan-limit | limit OS detection to promising targets |
| --osscan-guess | guess OS more aggressively |
| TIME PERFORMANCE | |
| -T[0-6] | set time template, higher is faster, but less precise |
| --min-hostgroup <msec> | parallel host scan group sizes |
| --max-hostgroup <msec> | |
| --min-parallelism <msec> | probe parallelization |
| --max-parallelism <msec> | |
| --min-rtt-timeout <msec> | secifies probe round trip time |
| --man-rtt-timeout <msec> | |
| --initial-rtt-timeout <msec> | |
| --host-timeout <msec> | give up on target after this long |
| FIREWALL/IDS EVASION AND SPOOFING | |
| -f | |
| --mtu <val> | fragmentize packets with given size |
| -S <srcIP> | spoof source IPaddr |
| -e <IF> | use specified interface |
| -g/--source-port <port> | use given portNo |
| --data-length<num> | append random data to send packets |
| --ttl <val> | set TTL Field |
| --spoof-mac <val> | spoof your MAC Address |
| OUTPUT | |
| -oN <filename> | normal |
| -oX<filename> | XML |
| -oS<filename> | script kiddi |
| -oG<filename> | Grepable Format |
| -oA<basename> | output in the three major formats at once |
| -v | increase verbosity level |
| -d[0-9] | set or increase debugging level |
| --packet-trace | show all packets send and received |
| --iflist | print host interfaces and routes |
| --append-ouput | |
| --resume <filename> | resume an aborted scan |
| --stylesheet <path/URL> | XSL stylesheet to transform XML output to HTML |
| --no_stylesheet | |
| MISC | |
| -6 | Enable IPv6 scanning |
| -A | Enable OS and Version Detection |
| --datadir <dirname> | specify custom Nmap data file location |
| --send-eth | send using raw ethernet frames |
| --send-ip | send using IP packets |
| --priviliged | send using IP packets |
| -V | print Version Number |
| -h | print hemp summary page |