NMAP CHEAT SHEET                                          ghcp.in
=================================================================
Only scan systems you own or have written permission to test.

HOST DISCOVERY
  nmap -sn 192.168.1.0/24          ping scan, no ports
  nmap -Pn 10.0.0.5                skip discovery, treat host as up

PORTS
  nmap 10.0.0.5                    top 1000 TCP ports
  nmap -p- 10.0.0.5                all 65535 TCP ports
  nmap -p 22,80,443 10.0.0.5       specific ports
  nmap -sU --top-ports 50 10.0.0.5 top 50 UDP ports (slow)

SCAN TYPES
  -sS   SYN scan (default as root)
  -sT   TCP connect scan (no root needed)
  -sU   UDP scan

DETECTION
  -sV   service versions
  -sC   default NSE scripts
  -O    OS detection (root)
  -A    -sV -sC -O --traceroute in one go

SPEED / OUTPUT
  -T4                      faster timing
  --min-rate 1000          at least 1000 packets per second
  -oA scan                 save as scan.nmap, scan.xml, scan.gnmap
  -v / -vv                 more verbose