Nmap
Network discovery scanner and port auditor for discovering live hosts, open ports, running services, and OS fingerprints.
Technical Architecture & Overview
Nmap (Network Mapper) is a utility for network discovery and security auditing. It uses raw IP packets to determine available hosts, open ports, running services, operating systems, and firewall configurations, with an extensible NSE scripting engine for advanced vulnerability detection. The Nmap Public Source License (NPSL) is not OSI-approved, so the tool is not classified as Open Source. The project sells Nmap OEM licenses for use in commercial products.
Targeted Technical Use Cases
Network reconnaissance, service identification, and vulnerability detection during authorized security assessments.
Evaluation & Trade-offs
Core Strengths
- +Official binary packages for Linux, Windows, and macOS, plus the Zenmap GUI and results viewer.
- +NSE (Nmap Scripting Engine) provides hundreds of scripts for service detection and vulnerability checks.
- +Supports a wide range of scan techniques including SYN, TCP connect, UDP, and SCTP scans.
Trade-Offs & Limitations
- -Nmap Public Source License (NPSL) is based on GPLv2 but is not a standard OSI-approved license.
- -Aggressive scanning can trigger IDS/IPS alerts and may be blocked by rate-limiting firewalls.
Defensive Security Application
Mapping network attack surfaces, identifying unauthorized services, and verifying firewall and port configurations.
Frequently Asked Questions
What is Nmap?→
Nmap (Network Mapper) is a utility for network discovery and security auditing. It uses raw IP packets to determine available hosts, open ports, running services, operating systems, and firewall configurations, with an extensible NSE scripting engine for advanced vulnerability detection. The Nmap Public Source License (NPSL) is not OSI-approved, so the tool is not classified as Open Source. The project sells Nmap OEM licenses for use in commercial products.
What is Nmap used for?→
Network reconnaissance, service identification, and vulnerability detection during authorized security assessments.
What are the strengths of Nmap?→
- +Official binary packages for Linux, Windows, and macOS, plus the Zenmap GUI and results viewer.
- +NSE (Nmap Scripting Engine) provides hundreds of scripts for service detection and vulnerability checks.
- +Supports a wide range of scan techniques including SYN, TCP connect, UDP, and SCTP scans.
What are the limitations of Nmap?→
- +Nmap Public Source License (NPSL) is based on GPLv2 but is not a standard OSI-approved license.
- +Aggressive scanning can trigger IDS/IPS alerts and may be blocked by rate-limiting firewalls.
How is Nmap used defensively?→
Mapping network attack surfaces, identifying unauthorized services, and verifying firewall and port configurations.