Linux-Tip.net - Using Zenmap 5.0 on Ubuntu 9.04

Linux-Tip News

We are proud to present Linux-Tip Europe. This page is designed to provide the Linux users community (not only in Europe) with news and articles that are of interest to them. It works by allowing members of the community to submit news and articles relating to Linux hardware and software. This same community can then decide what tips should be promoted based on what they consider to be the most important or interesting to the community by voting stories up and down. Stories that receive enough votes are promoted to the Linux-Tip Europe homepage.

Home

Workshops

Workstation

Using Zenmap 5.0 on Ubuntu 9.04

Friday, 09 October 2009

Article Index
Using Zenmap 5.0 on Ubuntu 9.04
How to use Zenmap
More advanced options
The Graphical Frontend

Page 3 of 4

More advanced options

--reason

This option explains why Nmap assigned a port status. For example, a port could be listed as "filtered" because no response was received, or because an ICMP network unreachable message was received.

--packet-trace

The option causes Nmap to print a summary of every packet sent or received. This is often used for debugging, but is also a valuable way for new users to understand exactly what Nmap is doing under the covers. To avoid printing thousands of lines, you may want to specify a limited number of ports to scan, such as -p20-30. If you only care about the goings on of the version detection subsystem, use --version-trace instead.

Nmap Scripting Engine (NSE)

The Nmap Scripting Engine (NSE) is one of Nmap's most powerful and flexible features. It allows users to write (and share) simple scripts to automate a wide variety of networking tasks. Those scripts are executed in parallel with the speed and efficiency you expect from Nmap. Users can rely on the growing and diverse set of scripts distributed with Nmap, or write their own to meet custom needs. One of these scripts is e.g. used by Ron Bowes to detect the Conficker worm in a network.

http://nmap.org/nsedoc/scripts/smb-check-vulns.html
http://nmap.org/nsedoc/index.html

Important: Scripts are not run in a sandbox and thus could accidentally or maliciously damage your system or invade your privacy. Never run scripts from third parties unless you trust the authors or have carefully audited the scripts yourself.
If you like to check your network using one of these scripts, download the script (if necessary) and store it in the directory:

/usr/local/share/nmap/scripts

Run it like this:

nmap --script smb-check-vulns.nse -p445 <host or network>