<- Back
  
    
      
  
  
    
      
      
  
  
  
    
      
      
  
  
  
    
      
      
  
  
  
    
      
      
  
  
  
      
    
    #network
    
    #lan
    
    #port-scanning
    
    #security
    
    #ssl
    
    #tls
    
    #ciphers
    
    #gateway
    
    #ip
    
    #route
    
    #routing
    
  
  
    
       nmap
    
    nmap
  
  
  SSL/TLS
    
        
        
        Find supported ciphers for a website
        
      
      
    nmap --script ssl-enum-ciphers -p 443 google.com
Find local IP address
    
        
        
        Find local IP address (Mac)
        
      
      ipconfig getifaddr en0
        
        
        Alternative (without the need to know the network)
        
      
      ifconfig -l | xargs -n1 ipconfig getifaddr
        
        
        Find local IP including subnet (/24 for example)
        
      
      
    ip addr show en0 | grep "inet\b" | awk '{print $2}'
        
      Find gateway IP address
    
        
        
        Find gateway IP address
        
      
      route -n
        
        
        via ip command
        
      
      
    ip route show default
nmap
    
        
        
        Scan (sn: Skip port scan, oG: Grepable output)
        
      
      nmap -sn -oG - 192.168.178.0/24
        
        
        Scan (automatically detect network range, one-liner)
        
      
      nmap -v0 -sn -oG - `ip addr show en0 | grep "inet\b" | awk '{print $2}'`
        
      
        
        
        Scan single host for open ports
        
      
      
    sudo nmap -p- -Pn -sS -sV -T4 --disable-arp-ping --max-retries 1 --initial-rtt-timeout 100ms --max-rtt-timeout 500ms --min-rate 1000 -vv my.host