July 23, 2026
Common Nmap Parameters
The following table lists frequently used Nmap parameters along with their descriptions in an academic context.
By Excalibra
Practical Examples
- Scan open ports on a specified IP address:
nmap -sS -p 1-65535 -v XXX.XXX.XXX.XXX - Scan live hosts in a /24 subnet:
nmap -sP XXX.XXX.XXX.XXX/24 - Scan specific ports:
nmap -p 80,1433,22,1521 XXX.XXX.XXX.XXX - Detect the host operating system:
nmap -O XXX.XXX.XXX.XXX - Comprehensive system detection:
nmap -v -A XXX.XXX.XXX.XXXNote: By default, Nmap scans 1,000 high-risk ports. - Scan a specified IP range:
nmap XXX.XXX.XXX.XXX-XXX - Penetrate a firewall for scanning (when ping is blocked):
nmap -Pn -A XXX.XXX.XXX.XXX - Use a script to scan web‑sensitive directories:
nmap -p 80 --script=http-enum.nse XXX.XXX.XXX.XXX