Nmap简单扫描过程
目录
老友记一、 主机发现（Host Discovery） 2
1. 探测局域网内活动主机 2
二、 端口扫描 4
1. 半开放扫描（TCP SYN Scanning） 4
2. TCP connect scanning 4
3. TCP ACK scanning 4
4. TCP FIN/Xmas/NULL scanning 4
5. UDP scanning 4
6. 其他方式 4
三、 版本侦测 4
1. 版本侦测主要分为以下几个步骤： 5
四、 操作系统侦测 5
1. 实现方式如下 5
一、 主机发现（Host Discovery）
用于发现目标主机是否在线（Alive，处于开启状态）。
every dog has his day
原理：
与Ping命令类似，发送探测包到目标主机，如果收到回复，那么说明目标主机是开启的。
1. 探测局域网内活动主机
例子1：扫描局域网192.168.1.100-192.168.1.120范围内哪些IP的主机是活动的。
命令：nmap –sn 192.168.31.100-254克雷登斯
Starting Nmap 6.46 ( nmap ) at 2015-06-01 17:07 CST
Nmap scan report for 192.168.31.101
Host is up (0.00028s latency).
MAC Address: 00:0C:29:BD:8B:91 (Super Micro Computer)
Nmap scan report for 192.168.31.102
Host is up (0.00088s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.110
Host is up (0.00047s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.157
抗议的意思Host is up (0.00052s latency).coup detat
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.158
Host is up (0.00096s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.161
Host is up (0.00045s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.163
Host is up (0.00027s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.165
Host is up (0.00036s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.180
Host is up (0.00085s latency).
MAC Address: 00:0C:29:BD:8B:91 (Asustek Computer)
Nmap scan report for 192.168.31.202
Host is up (0.0011s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.205
Host is up (0.00074s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.209
Host is up (0.00046s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 111. (192.168.31.111)
Host is up.
Nmap done: 155 IP address (13 hosts up) scanned in 1.14 conds
例子2：扫描局域网192.168.31.0网段下哪些IP的主机是活动的
命令：nmap -sn 192.168.31.0/24国防科技大学2021录取分数线
Starting Nmap 6.46 ( nmap ) at 2015-06-01 17:35 CST
Nmap scan report for 192.168.31.1
Host is up (0.014s latency).linea
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.5
Host is up (0.0010s latency).
MAC Address: 00:0C:29:BD:8B:91 (Realtek Semiconductor)
Nmap scan report for 192.168.31.6
Host is up (0.00098s latency).
MAC Address: 00:0C:29:BD:8B:91 (Lanner Electronics)
Nmap scan report for 192.168.31.8
Host is up (0.00094s latency).
MAC Address: 00:0C:29:BD:8B:91 (Super Micro Computer)
法克u
Nmap scan report for 192.168.31.9
Host is up (0.00080s latency).
MAC Address: 00:0C:29:BD:8B:91 (Lanner Electronics)
Nmap scan report for 192.168.31.25
Host is up (0.00057s latency).
MAC Address: 00:0C:29:BD:8B:91 (Asustek Computer)
Nmap scan report for 192.168.31.26
Host is up (0.00056s latency).
MAC Address: 00:0C:29:BD:8B:91 (Asustek Computer)
Nmap scan report for 192.168.31.27小学一年级家长会班主任发言稿
Host is up (0.00060s latency).
MAC Address: 00:0C:29:BD:8B:91 (Asustek Computer)
Nmap scan report for 192.168.31.37
Host is up (0.00040s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.40
Host is up (0.00072s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.49
Host is up (0.00042s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.63
Host is up (0.00056s latency).
MAC Address: 00:0C:29:BD:8B:91 (Super Micro Computer)
Nmap scan report for 192.168.31.80
Host is up (0.0017s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.81
Host is up (0.0016s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.82
Host is up (0.0016s latency).
生病英语MAC Address: 00:0C:29:BD:8B:91 (VMware)
Nmap scan report for 192.168.31.83
Host is up (0.0016s latency).
MAC Address: 00:0C:29:BD:8B:91 (VMware)
