Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying NMAP Essentials
  • Table Of Contents Toc
NMAP Essentials

NMAP Essentials

By : Shaw
4 (1)
Buy this Book
close
close
NMAP Essentials

NMAP Essentials

4 (1)
By: Shaw
Buy this Book

Overview of this book

This book is for beginners who wish to start using Nmap, who have experience as a system administrator or of network engineering, and who wish to get started with Nmap.
Table of Contents (12 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Introduction to Nmap
Icon
1. Introduction to Nmap
Icon
Nmap's humble beginnings
Icon
The many uses of Nmap
Icon
Installing Nmap
Icon
Building Nmap from source
Icon
Summary
2
2. Network Fundamentals
Icon
2. Network Fundamentals
Icon
The structure of the Internet
Icon
The OSI model
Icon
Port scanning
Icon
TCP and UDP
Icon
Service banners
Icon
Summary
3
3. Nmap Basics
Icon
3. Nmap Basics
Icon
How to choose a target
Icon
Running a default scan
Icon
Service version scans
Icon
Logging scans
Icon
Specified scan ranges
Icon
Understanding the reason flag
Icon
Summary
4
4. Advanced Nmap Scans
Icon
4. Advanced Nmap Scans
Icon
Host detection methods
Icon
Running a ping agnostic scan
Icon
Scanning UDP services
Icon
Special TCP scans
Icon
Operating system detection
Icon
Increasing verbosity in scans
Icon
Packet tracing
Icon
Summary
5
5. Performance Optimization
Icon
5. Performance Optimization
Icon
Nmap timing optimization
Icon
Customized host group sizes
Icon
Increasing and decreasing parallelism
Icon
Dealing with stuck hosts
Icon
Delaying and increasing probe rates
Icon
Summary
6
6. Introduction to the Nmap Scripting Engine
Icon
6. Introduction to the Nmap Scripting Engine
Icon
The history of the NSE
Icon
The inner working of the NSE
Icon
Finding Nmap scripts
Icon
Running Nmap scripts
Icon
Summary
7
7. Writing Nmap Scripts
Icon
7. Writing Nmap Scripts
Icon
Anatomy of an Nmap script
Icon
Defining an Nmap script – script headers
Icon
Triggering functions – the rule
Icon
Defining a script's action
Icon
Summary
8
8. Additional Nmap Tools
Icon
8. Additional Nmap Tools
Icon
Attacking services with Ncrack
Icon
Host detection with Nping
Icon
File transfers and backdoors with Ncat
Icon
Comparing Nmap results with Ndiff
Icon
Summary
9
9. Vulnerability Assessments and Tools
chevron up
Icon
9. Vulnerability Assessments and Tools
Icon
Conducting vulnerability scans with Nessus
Icon
Assessing web server issues with Nikto
Icon
Identifying sensitive web directories with DirBuster
Icon
Getting started with intercepting proxies
Icon
Summary
10
10. Penetration Testing with Metasploit
Icon
10. Penetration Testing with Metasploit
Icon
Installing Metasploit
Icon
Scanning with Metasploit
Icon
Attacking services with Metasploit
Icon
What to learn next
Icon
Summary
11
Index
Icon
Index

Assessing web server issues with Nikto

Nikto is an open source tool that allows security assessors to evaluate the configuration of web servers. Unlike Nmap or Nessus, Nikto is designed exclusively for web-based configuration evaluations. As a general rule, it's a good idea to run Nikto (or a similar web scanner) on web services that are identified as part of a penetration test or vulnerability assessment. Nikto can be accessed from its web page at https://cirt.net/Nikto2.

The installation of Nikto is a fairly straightforward process, similar to the other tools we've used throughout this book:

  1. wget https://github.com/sullo/nikto/archive/master.zip

  2. unzip master.zip

  3. cd nikto-master/program

  4. Nikto is now ready to use!

Nikto, like many early security tools, is a Perl script—which means that as long as Perl is available on your system, Nikto is good to go! In order to demonstrate how Nikto works, we will run a simple scan against our favorite host, scanme.nmap.org. To run this scan, we invoke...

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
NMAP Essentials
End of Section 9
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon