- For the maternity policy see National Maternity Action
Plan.
Nmap is a free security scanner written by Fyodor. It is used to evaluate the security of computers, and to discover services or servers on a
computer network.
Features
Nmap features include:
- Host Discovery - Identifying computers on a network, for example listing the computers which respond to pings, or which have a particular port open
- Port Scanning - Enumerating the open ports on
one or more target computers
- Version Detection - Interrogating listening network services listening on remote computers to determine the application name
and version number. [1]
- OS Detection - Remotely determining the operating system and some hardware characteristics of network devices.
Typical uses of Nmap:
- Auditing the security of a computer, by identifying the network connections which can be made to it [2]
- Identifying open ports on a target computer in preparation for attacking it [3]
- Network inventory, maintenance, and asset management
- Auditing the security of a network, by identifying unexpected new servers [4]
Platforms
Nmap runs on Unix-like systems such as Linux, Solaris, Mac OS X, and BSD, and also on Microsoft Windows and
AmigaOS. [5].
Graphical interfaces
The official GUI frontend is nmapfe, originally written by Zach
Smith, and integrated into Nmap since version 2.2 [6].
Various web-based interfaces are available for controlling Nmap from a web browser. Examples are LOCALSCAN [7], nmap-web [8], and Nmap-CGI [9].
NMapW [10] is an up-to-date
Microsoft Windows GUI interface for Nmap written by Syhunt.
NMapWin [11] is another Win32 GUI
interface for Nmap. It has not, however, been updated since v1.4.0 was released in June 2003.
A full-featured cross-platform GUI for Nmap is UMIT by Adriano Monteiro Marques.
History
Nmap was first published in September 1997, as an article in Phrack
Magazine with source-code included [12]
Further development included better algorithms for determining which services were running [13], code rewrites (C to [[C++]]), additional scan types and protocol support (e.g. IPv6)
Nmap reached version 3.5 in
February 2004, and version 4.0
in January 2006, with hundreds of improvements.
Changes in each release are recorded in the Nmap Changelog.
Controversy
Like most tools used in computer security, Nmap can be used for Black hat hacking [14], or attempting to gain unauthorized access to computer systems. It would typically be used to discover open
ports which are likely to be running vulnerable services, in preparation for attacking those services with another program
[15].
System administrators often use Nmap to search for unauthorized servers on their network, or for computers which don't meet
the organization's minimum level of security [16].
Nmap is often confused with host vulnerability assessment tools such as Nessus,
which go further in their exploration of a target by testing for common vulnerabilities in the open ports found.
See also
- Port scanner for explanation on the basic concepts and a list of other port scanning
tools.
External links
Official documentation and papers
This entry is from Wikipedia, the leading user-contributed encyclopedia. It may not have been reviewed by professional editors (see full disclaimer)