Nmap
Network discovery scanner and port auditor for discovering live hosts, open ports, running services, and OS fingerprints.
Technical Architecture & Overview
Nmap (Network Mapper) is the de-facto standard tool for network discovery and security auditing. It uses raw IP packets to determine available hosts, open ports, running services, operating systems, and firewall configurations, with an extensible NSE scripting engine for advanced vulnerability detection. The Nmap Public Source License (NPSL) is not OSI-approved, so the tool is classified as Free rather than Open Source.
Targeted Technical Use Cases
Network reconnaissance, service identification, and vulnerability detection during authorized security assessments.
Evaluation & Trade-offs
Core Strengths
- +Industry-standard port scanner included in virtually every penetration testing distribution.
- +NSE (Nmap Scripting Engine) provides hundreds of scripts for service detection and vulnerability checks.
- +Supports a wide range of scan techniques including SYN, TCP connect, UDP, and SCTP scans.
Trade-Offs & Limitations
- -Nmap Public Source License (NPSL) is based on GPLv2 but is not a standard OSI-approved license.
- -Aggressive scanning can trigger IDS/IPS alerts and may be blocked by rate-limiting firewalls.
Defensive Security Application
Mapping network attack surfaces, identifying unauthorized services, and verifying firewall and port configurations.
Frequently Asked Questions
What is Nmap?→
Nmap (Network Mapper) is the de-facto standard tool for network discovery and security auditing. It uses raw IP packets to determine available hosts, open ports, running services, operating systems, and firewall configurations, with an extensible NSE scripting engine for advanced vulnerability detection. The Nmap Public Source License (NPSL) is not OSI-approved, so the tool is classified as Free rather than Open Source.
What is Nmap used for?→
Network reconnaissance, service identification, and vulnerability detection during authorized security assessments.
What are the strengths of Nmap?→
- +Industry-standard port scanner included in virtually every penetration testing distribution.
- +NSE (Nmap Scripting Engine) provides hundreds of scripts for service detection and vulnerability checks.
- +Supports a wide range of scan techniques including SYN, TCP connect, UDP, and SCTP scans.
What are the limitations of Nmap?→
- +Nmap Public Source License (NPSL) is based on GPLv2 but is not a standard OSI-approved license.
- +Aggressive scanning can trigger IDS/IPS alerts and may be blocked by rate-limiting firewalls.
How is Nmap used defensively?→
Mapping network attack surfaces, identifying unauthorized services, and verifying firewall and port configurations.