Nmap in the Enterprise

Book description

Nmap, or Network Mapper, is a free, open source tool that is available under the GNU General Public License as published by the Free Software Foundation. It is most often used by network administrators and IT security professionals to scan corporate networks, looking for live hosts, specific services, or specific operating systems. Part of the beauty of Nmap is its ability to create IP packets from scratch and send them out utilizing unique methodologies to perform the above-mentioned types of scans and more. This book provides comprehensive coverage of all Nmap features, including detailed, real-world case studies.
  • Understand Network Scanning: Master networking and protocol fundamentals, network scanning techniques, common network scanning tools, along with network scanning and policies.
  • Get Inside Nmap: Use Nmap in the enterprise, secure Nmap, optimize Nmap, and master advanced Nmap scanning techniques.
  • Install, Configure, and Optimize Nmap: Deploy Nmap on Windows, Linux, Mac OS X, and install from source.
  • Take Control of Nmap with the Zenmap GUI: Run Zenmap, manage Zenmap scans, build commands with the Zenmap command wizard, manage Zenmap profiles, and manage Zenmap results.
  • Run Nmap in the Enterprise: Start Nmap scanning, discover hosts, port scan, detecting operating systems, and detect service and application versions
  • Raise those Fingerprints: Understand the mechanics of Nmap OS fingerprinting, Nmap OS fingerprint scan as an administrative tool, and detect and evade the OS fingerprint scan.
  • “Tool” around with Nmap: Learn about Nmap add-on and helper tools: NDiff--Nmap diff, RNmap--Remote Nmap, Bilbo, Nmap-parser.
  • Analyze Real-World Nmap Scans: Follow along with the authors to analyze real-world Nmap scans.
  • Master Advanced Nmap Scanning Techniques: Torque Nmap for TCP scan flags customization, packet fragmentation, IP and MAC address spoofing, adding decoy scan source IP addresses, add random data to sent packets, manipulate time-to-live fields, and send packets with bogus TCP or UDP checksums.

Table of contents

  1. Cover image
  2. Title page
  3. Table of Contents
  4. Copyright page
  5. Authors
  6. Technical Editor
  7. Chapter 1: Introducing Network Scanning
    1. Introduction
    2. What is Network Scanning?
    3. Networking and Protocol Fundamentals
    4. Network Scanning Techniques
    5. Common Network Scanning Tools
    6. Who Uses Network Scanning?
    7. Detecting and Protecting
    8. Network Scanning and Policy
    9. Summary
    10. Solutions Fast Track
    11. Frequently Asked Questions
  8. Chapter 2: Introducing Nmap
    1. Introduction
    2. What is Nmap?
    3. Using Nmap in the Enterprise
    4. Securing Nmap
    5. Optimizing Nmap
    6. Advanced Nmap Scanning Techniques
    7. Summary
    8. Solutions Fast Track
    9. Frequently Asked Questions
  9. Chapter 3: Getting and Installing Nmap
    1. Introduction
    2. Getting Nmap
    3. Installing Nmap on Windows
    4. Installing Nmap on Linux
    5. Installing Nmap on Mac OS X
    6. Installing Nmap from Source
    7. Summary
    8. Solutions Fast Track
    9. Frequently Asked Questions
  10. Chapter 4: Using Nmap
    1. Introduction
    2. Starting Nmap Scanning
    3. Discovering Hosts
    4. Port Scanning
    5. Detecting Operating Systems
    6. Detecting Service and Application Versions
    7. Other Scanning Options
    8. Summary
    9. Solutions Fast Track
    10. Frequently Asked Questions
  11. Chapter 5: Using Zenmap
    1. Introduction
    2. Running Zenmap
    3. Managing Zenmap Scans
    4. Building Commands with the Zenmap Command Wizard
    5. Managing Zenmap Profiles
    6. Managing Zenmap Results
    7. Summary
    8. Solutions Fast Track
    9. Frequently Asked Questions
  12. Chapter 6: Nmap OS Fingerprinting
    1. Introduction
    2. What is OS fingerprinting?
    3. The Mechanics of Nmap OS Fingerprinting
    4. Nmap OS Fingerprint Scan as an Administrative Tool
    5. Summary
    6. Solutions Fast Track
    7. Frequently Asked Questions
  13. Chapter 7: Tooling Around with Nmap
    1. Introduction
    2. NDiff–Nmap Diff
    3. RNmap–Remote Nmap
    4. Bilbo
    5. Nmap-Parser
    6. Summary
    7. Solutions Fast Track
    8. Frequently Asked Questions
  14. Chapter 8: Nmap Scanning in the Real World
    1. Introduction
    2. Detecting Nmap on your Network
    3. Discovering Stealthy Scanning Techniques
    4. Detecting Nmap Fragment Scans
    5. Discovering Unauthorized Applications and Services
    6. Testing Incident Response and Managed Services Alerting
    7. Summary
    8. Solutions Fast Track
    9. Frequently Asked Questions
  15. Index

Product information

  • Title: Nmap in the Enterprise
  • Author(s): Angela Orebaugh, Becky Pinkard
  • Release date: August 2011
  • Publisher(s): Syngress
  • ISBN: 9780080558745