Nmap

Nmap features include:

• Host discovery – Identifying hosts on a network. For example, listing the hosts that respond to TCP and/or ICMP requests or have a particular port open.
• Port scanning [8] – Enumerating the open ports on target hosts.
• Version detection – Interrogating network services on remote devices to determine application name and version number.[9]
• OS detection – Determining the operating system and hardware characteristics of network devices.
• Scriptable interaction with the target – using Nmap Scripting Engine[10] (NSE) and Lua programming language.

Nmap can provide further information on targets, including reverse DNS names, device types, and MAC addresses.[11]

Typical uses of Nmap:

• Auditing the security of a device or firewall by identifying the network connections which can be made to, or through it.[12]
• Identifying open ports on a target host in preparation for auditing.[13]
• Network inventory, network mapping, maintenance and asset management.
• Auditing the security of a network by identifying new servers.[14]
• Generating traffic to hosts on a network, response analysis and response time measurement.[15]
• Finding and exploiting vulnerabilities in a network.[16]
• DNS queries and subdomain search

NmapFE, originally written by Kanchan, was Nmap's official GUI for Nmap versions 2.2 to 4.22.[17] For Nmap 4.50 (originally in the 4.22SOC development series) NmapFE was replaced with Zenmap, a new official graphical user interface based on UMIT, developed by Adriano Monteiro Marques.

Web-based interfaces exists that allow either controlling Nmap or analysing Nmap results from a web browser, such as IVRE.[18]

• 
  Zenmap, showing results for a port scan against Wikipedia
• 
  NmapFE, showing results for a port scan against Wikipedia
• 
  XNmap, a Mac OS X GUI

Nmap provides four possible output formats. All but the interactive output is saved to a file. Nmap output can be manipulated by text processing software, enabling the user to create customized reports.[19]

Interactive

presented and updated real time when a user runs Nmap from the command line. Various options can be entered during the scan to facilitate monitoring.

XML

a format that can be further processed by XML tools. It can be converted into a HTML report using XSLT.

Grepable

output that is tailored to line-oriented processing tools such as grep, sed or awk.

Normal

the output as seen while running Nmap from the command line, but saved to a file.

Script kiddie

meant to be an amusing way to format the interactive output replacing letters with their visually alike number representations. For example, Interesting ports becomes Int3rest1ng p0rtz. This is known as Leet.

Nmap was first published in September 1997, as an article in Phrack Magazine with source-code included.[20] With help and contributions of the computer security community, development continued. Enhancements included operating system fingerprinting, service fingerprinting,[9] code rewrites (C to C++), additional scan types, protocol support (e.g. IPv6, SCTP[21]) and new programs that complement Nmap's core features

Major releases include:[17]

Nmap is a tool that can be used to discover services running on Internet connected systems. Like any tool, it could potentially be used for black hat hacking,[33] as a precursor to attempts to gain unauthorized access to computer systems; however, Nmap is also used by security and systems administration to assess their own networks for vulnerabilities (i.e. white hat hacking).

System administrators can use Nmap to search for unauthorized servers, or for computers that do not conform to security standards.[34]

In some jurisdictions, unauthorized port scanning is illegal.[35]

Nmap was originally distributed under the GNU Public License (GPL)[20]. In later releases, Nmap's authors added clarifications and specific interpretations to the license where they felt the GPL was unclear or lacking.[36] For instance, Nmap 3.50 specifically revoked the license of SCO Group to distribute Nmap software because of their views on the SCO-Linux controversies.[37]

In The Matrix Reloaded, Trinity is seen using Nmap to access a power plant's computer system,[38] allowing Neo to "physically" break into a building. The appearance of Nmap in the film was widely discussed on Internet forums and hailed as an unusually realistic example of hacking.[39]

Nmap and NmapFE were used in The Listening, a 2006 movie about a former NSA officer who defects and mounts a clandestine counter-listening station high in the Italian alps.

Nmap source code can be seen in the movie Battle Royale, as well as brief views of the command line version of Nmap executing in Live Free or Die Hard and Bourne Ultimatum.[38] In 2013, Nmap continued to make appearances in movies including popular sci-fi movie Elysium.

The film Dredd, a film adaptation of the famous Judge Dredd comics, was released in 2012 and also contains multiple Nmap scenes.[38] Nmap is used for network reconnaissance and exploitation of the slum tower network. It is even seen briefly in the movie's trailer.

The command Nmap is widely used in the video game Hacknet, allowing to probe the network ports of a target system to hack it.

In Snowden, Nmap is used in the aptitude test scene about 14 minutes into the movie.

Nmap is an integral part of academic activities. It has been used for research involving the TCP/IP protocol suite and networking in general.[40] As well as being a research tool, Nmap has become a research topic.[41]

• Official website