Scan Type |
Description |
NMAP Options |
Speed |
Quick Ping Scan |
Only checks if remote hosts are online, no port scanning |
-sn -T4 |
Very Fast |
Fast Top Ports |
Scans only the most common 100 ports on remote servers |
-F -T4 |
Fast |
Basic Scan |
Standard SYN scan with service version detection for remote targets |
-sS -sV -T4 |
Medium |
Default Scripts Scan |
Basic scan plus default scripts for remote server assessment |
-sS -sV -sC -T4 |
Medium |
Top Vulnerabilities |
Checks remote servers for common vulnerabilities |
-sV --script vuln -T3 |
Medium |
Common Web Scan |
Focuses on remote web servers and their vulnerabilities |
-sS -sV -p 80,443,8080,8443 --script http-title,http-headers,http-methods,http-enum -T3 |
Medium |
Service Detailed |
Detailed remote service scan with OS detection |
-sS -sV -A -T3 |
Slow |
Windows Enumeration |
Enumerates Windows services on remote servers |
-sS -sV -p 135,139,445 --script smb-enum-shares,smb-os-discovery,smb-vuln-ms17-010 -T3 |
Slow |
Linux Enumeration |
Enumerates Linux services on remote servers |
-sS -sV -p 22,111,2049 --script ssh2-enum-algos,rpcinfo -T3 |
Slow |
UDP Basic |
Basic UDP port scan on remote servers |
-sU -sV --top-ports 100 -T4 |
Slow |
Malware Detection |
Checks for potential malware indicators on remote servers |
-sS -sV --script malware,auth,vuln -T3 |
Slow |
Auth Bypass Check |
Tests for authentication bypass vulnerabilities on remote servers |
-sS -sV --script auth -T3 |
Slow |
SQL Injection Scan |
Focuses on detecting SQL injection vulnerabilities in remote web applications |
-sS -sV -p 80,443,8080,8443,3306,1433 --script http-sql-injection,ms-sql-info,mysql-info -T3 |
Slow |
IoT Device Scan |
Specialized scan for remote IoT devices and protocols |
-sS -sV -p 23,25,80,443,1883,8080,8443 -T3 |
Slow |
SCADA/ICS Scan |
Specialized scan for remote industrial control systems |
-sS -sV -p 102,502,20000,44818,47808 -T3 |
Slow |
VoIP SIP Scan |
Scans for remote VoIP/SIP services and vulnerabilities |
-sU -sV -p 5060-5061 --script sip-methods -T3 |
Slow |
Brute Force Scan |
Runs brute force scripts against remote services |
-sS -sV --script brute -T3 |
Very Slow |
All Ports Scan |
Scans all 65535 TCP ports on remote targets |
-sS -sV -p- -T3 |
Very Slow |
Stealth Comprehensive |
Slower, stealthier scan of all ports on remote servers |
-sS -sV -A -p- -T2 |
Extremely Slow |
Full Vulnerability |
Extensive vulnerability assessment of remote servers with standard scripts |
-sS -sV --script=ftp-anon,ssl-enum-ciphers,vuln -p 21,22,23,25,53,80,110,111,135,139,143,443,445,993,995,1723,3306,3389,5900,8080 -T3 -v |
Extremely Slow |