리눅스 nmap

nmap, network mapper, nmap security scanner
네트워크 매퍼, 보안스캐너

로컬+원격 서버 포트 스캔

1 설치

[root@jmnote ~]# yum install nmap -y
... (생략)
===========================================================================================
 Package        Arch          Version                                    Repository   Size
===========================================================================================
Installing:
 nmap           x86_64        2:5.51-2.el6                               Daum        2.7 M
Installing for dependencies:
 libpcap        x86_64        14:1.0.0-6.20091201git117cb5.el6           Daum        126 k

Transaction Summary
===========================================================================================
Install       2 Package(s)

Total download size: 2.9 M
... (생략)                                    

Complete!

2 열린 포트 확인 (로컬서버)

[root@jmnote ~]# nmap localhost

Starting Nmap 5.51 ( http://nmap.org ) at 2012-10-04 22:33 KST
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000053s latency).
Other addresses for localhost (not scanned): 127.0.0.1
Not shown: 1675 closed ports
PORT     STATE SERVICE
21/tcp   open  ftp
22/tcp   open  ssh
80/tcp   open  http
443/tcp  open  https
3306/tcp open  mysql

Nmap finished: 1 IP address (1 host up) scanned in 0.110 seconds

3 열린 포트 확인 (원격서버)

방화벽에 막히는 포트 확인 (nmap) 문서를 참고하십시오.

[root@jmnote ~]# nmap ko.wikipedia.org

Starting Nmap 5.51 ( http://nmap.org ) at 2012-10-04 22:37 KST
Nmap scan report for ko.wikipedia.org (208.80.154.225)
Host is up (0.42s latency).
rDNS record for 208.80.154.225: wikipedia-lb.eqiad.wikimedia.org
Not shown: 989 closed ports
PORT     STATE    SERVICE
22/tcp   open     ssh
80/tcp   open     http
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
179/tcp  open     bgp
443/tcp  open     https
445/tcp  filtered microsoft-ds
1037/tcp filtered ams
2869/tcp filtered icslap
4444/tcp filtered krb524
8649/tcp open     unknown

Nmap done: 1 IP address (1 host up) scanned in 19.51 seconds

4 아이피 대역 핑 확인

[root@jmnote ~]# nmap -sP 192.168.0.1-50 | grep for
Nmap scan report for 192.168.0.4
Nmap scan report for 192.168.0.12
Nmap scan report for 192.168.0.23
Nmap scan report for 192.168.0.24

→ 내부 네트워크에 4개의 IP가 있다. 즉 4대의 컴퓨터가 연결되어 있음.

5 같이 보기