Nmap features include:
Nmap can provide further information on targets, including reverse DNS names, device types, and MAC addresses.10
Typical uses of Nmap:
NmapFE, originally written by Kanchan, was Nmap's official GUI for Nmap versions 2.2 to 4.22.17 For Nmap 4.50 (originally in the 4.22SOC development series) NmapFE was replaced with Zenmap, a new official graphical user interface based on UMIT, developed by Adriano Monteiro Marques.
Four different output formats are offered by Nmap. Everything is saved to a file except the interactive output. Text processing software can be used to modify Nmap output, allowing the user to customize reports.18
Nmap was first published in September 1997, as an article in Phrack Magazine with source-code included.19 With help and contributions of the computer security community, development continued. Enhancements included operating system fingerprinting, service fingerprinting,20 code rewrites (C to C++), additional scan types, protocol support (e.g. IPv6, SCTP21) and new programs that complement Nmap's core features.
Major releases include:22
Nmap is a tool that can be used to discover services running on Internet connected systems. Like any tool, it could potentially be used for black hat hacking,39 as a precursor to attempts to gain unauthorized access to computer systems. However, Nmap is also used by security and systems administrators to assess their own networks for vulnerabilities (i.e. white hat hacking).
System administrators can use Nmap to search for unauthorized servers, or for computers that do not conform to security standards.40
In 2003 Supreme Court of Finland has ruled that port scanning has amounted to an attempted computer break in, which was illegal under Finnish Penal code at the time:41
In its ruling the Supreme Court stated that the defendant had systematically carried out port scanning operations to gather information for the purpose of unauthorised break-in to the bank's computer network. This amounted to an attempted computer break in.42
Nmap was originally distributed under the GNU General Public License (GPL).43 In later releases, Nmap's authors added clarifications and specific interpretations to the license where they felt the GPL was unclear or lacking.44 For instance, Nmap 3.50 specifically revoked the license of SCO Group to distribute Nmap software because of their views on the SCO-Linux controversies.45
Starting with version 7.90, Nmap transitions to a new custom license NPSL, dual-licensing versions 7.90, 7.91, and 7.92 under both old and new licenses.46 Several Linux distributions consider the new license non-free.4748
In The Matrix Reloaded, Trinity is seen using Nmap to access a power plant's computer system,49 allowing Neo to "physically" break into a building. The appearance of Nmap in the film was widely discussed on Internet forums and hailed as an unusually realistic example of hacking.50
Nmap and NmapFE were used in The Listening, a 2006 movie about a former NSA officer who defects and mounts a clandestine counter-listening station high in the Italian alps.
Nmap source code can be seen in the movie Battle Royale, as well as brief views of the command line version of Nmap executing in Live Free or Die Hard and Bourne Ultimatum.51 In 2013, Nmap continued to make appearances in movies including popular sci-fi movie Elysium.
The film Dredd, a film adaptation of the famous Judge Dredd comics, was released in 2012 and also contains multiple Nmap scenes.52 Nmap is used for network reconnaissance and exploitation of the slum tower network. It is even seen briefly in the movie's trailer.
The command Nmap is widely used in the video game Hacknet, allowing to probe the network ports of a target system to hack it.
In Snowden, Nmap is used in the aptitude test scene about 14 minutes into the movie.
Nmap is an integral part of academic activities. It has been used for research involving the TCP/IP protocol suite and networking in general.53 Besides being a research tool, Nmap has also become a research topic.54
"Matrix mixes life and hacking". BBC News. 2003-05-19. Retrieved 2018-10-28. http://news.bbc.co.uk/2/hi/technology/3039329.stm ↩
Joshi, Sagar (2021-02-25). "What is Nmap And Why You Should Use It?". The Hack Report. Retrieved 2021-03-01. http://thehackreport.com/what-is-nmap-and-why-you-should-use-it/ ↩
"Nmap Scripting Engine: Introduction". Nmap.org. Retrieved 2018-10-28. https://nmap.org/book/nse.html#nse-intro ↩
"The History and Future of Nmap". Nmap.org. Retrieved 2018-10-28. https://nmap.org/book/history-future.html ↩
"Other Platforms". Nmap.org. Retrieved 2018-10-28. https://nmap.org/book/inst-other-platforms.html ↩
"Nmap Installation for Windows". Nmap.org. Retrieved 2018-10-28. https://nmap.org/install/inst-windows.html ↩
"Service and Application Version Detection". Nmap.org. Retrieved 2018-10-28. https://nmap.org/book/vscan.html ↩
"Nmap Scripting Engine". Nmap.org. Retrieved 2018-10-28. https://nmap.org/book/nse.html ↩
"Nmap Reference Guide". Nmap.org. Retrieved 2018-10-28. https://nmap.org/book/man.html ↩
Nmap Overview and Demonstration. https://nmap.org/book/nmap-overview-and-demos.html ↩
When Good Scanners Go Bad, From [1] Archived 2000-06-14 at the Wayback Machine, Computerworld 22 March 1999 https://nmap.org/press/computerworld_when_good_scanners_go_bad.txt ↩
"Linux.lat". Google News. 27 June 2024. Retrieved 2024-07-01. https://linux.lat/mastering-nmap-nse-script-development-a-comprehensive-guide/ ↩
"nmap-audit – Network auditing with Nmap". heavyk.org. Archived from the original on 2009-04-01. Retrieved 2018-10-28. https://web.archive.org/web/20090401141545/http://heavyk.org/nmap-audit/nmap-audit-pod.html ↩
"Nping - Network packet generation tool / ping utility". Nmap.org. Retrieved 2018-10-28. https://nmap.org/nping/ ↩
Leyden, John (2014-08-15). "Revealed ... GCHQ's incredible hacking tool to sweep net for vulnerabilities: Nmap". TheRegister.co.uk. Retrieved 2018-10-28. https://www.theregister.co.uk/2014/08/15/gchq_port_scan_hacienda/ ↩
"Nmap Changelog". Nmap.org. Retrieved 2018-10-29. https://nmap.org/changelog.html ↩
"Nmap Reference Guide: Output". Nmap.org. Retrieved 2018-10-29. https://nmap.org/book/man-output.html ↩
"The Art of Port Scanning". Phrack Magazine. Vol. 7, no. 51. 1997-09-01. Retrieved 2018-10-29. http://phrack.org/issues/51/11.html#article ↩
"SCTP Support for Nmap". Roe.ch. 2011-05-10. Retrieved 2018-10-29. https://www.roe.ch/Nmap_SCTP ↩
"The History and Future of Nmap". Nmap.org. Retrieved 2018-10-29. https://nmap.org/book/history-future.html#history ↩
"Nmap 3.70 Released—Core Scan Engine Rewrite!". Seclists.org. 2004-08-31. Retrieved 2018-10-29. https://seclists.org/nmap-announce/2004/10 ↩
"Google sponsors Nmap summer student developers". Seclists.org. 2005-06-02. Retrieved 2018-10-29. https://seclists.org/nmap-announce/2005/7 ↩
"Nmap 4.50 Press Release". Insecure.org. 2007-12-13. Retrieved 2018-10-29. https://insecure.org/stf/Nmap-4.50-Release.html ↩
"Nmap 4.85BETA5: Now with Conficker detection!". Seclists.org. 2009-03-30. Retrieved 2018-10-29. https://seclists.org/nmap-dev/2009/q1/870 ↩
"Nmap 5.00 Released". Nmap.org. 2009-07-16. Retrieved 2018-10-29. https://nmap.org/5/ ↩
"nmap/nping/docs/nping.1 at master · nmap/nmap". GitHub. https://github.com/nmap/nmap ↩
"Nmap 5.50: Now with Gopher protocol support!". Seclists.org. 2011-01-28. Retrieved 2018-10-29. https://seclists.org/nmap-announce/2011/0 ↩
"Nmap 7 Released". Nmap.org. 2015-11-19. Retrieved 2018-10-29. https://nmap.org/7/ ↩
"Nmap 7.70". Nmap.org. 2018-03-20. Retrieved 2018-10-29. https://nmap.org/changelog.html#7.70 ↩
"Nmap 7.80". Nmap.org. 2019-08-10. Retrieved 2019-08-10. https://nmap.org/changelog.html#7.80 ↩
"Nmap 7.90". Nmap.org. 2019-10-03. Retrieved 2020-10-03. https://nmap.org/changelog.html#7.90 ↩
Poulsen, Kevin (2004-11-24). "Hacking tool reportedly draws FBI subpoenas". SecurityFocus.com. Retrieved 2018-10-29. /wiki/Kevin_Poulsen ↩
"How To Conduct A Security Audit" (PDF). PC Network Advisor. No. 120. July 2000. Archived from the original (PDF) on 2021-04-27. Retrieved 2018-10-29. https://web.archive.org/web/20210427043529/https://www.techsupportalert.com/pdf/t04123.pdf ↩
"First ruling by the Supreme Court of Finland on attempted break-in". Osborne Clarke. 2003. Archived from the original on 2005-05-05. Retrieved 2018-10-29. https://web.archive.org/web/20050505213444/http://www.osborneclarke.com/publications/text/ITM0903f.htm ↩
"Important Nmap License Terms". Nmap.org. Archived from the original on 2018-07-20. Retrieved 2018-10-29. https://web.archive.org/web/20180720051328/https://svn.nmap.org/nmap/COPYING ↩
"Nmap 3.50 Press Release". 2004-02-20. Retrieved 2018-10-29. https://insecure.org/stf/Nmap-3.50-Release.html ↩
"Nmap Public Source License". Nmap.org. Retrieved 2021-12-15. https://nmap.org/npsl/ ↩
"Nmap Public Source License (NPSL) Version 0.92". Fedora Mailing-Lists. Retrieved 2021-12-15. https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/GZIDC4DHXZP67LFU7P2OT2AQVDJRHZ2M/ ↩
"Add NPSL (nmap license) to MISC_FREE". Gentoo's Bugzilla. Retrieved 2021-12-15. https://bugs.gentoo.org/show_bug.cgi?id=749390 ↩
"Nmap In The Movies". Retrieved 2018-10-29. https://nmap.org/movies/ ↩
Poulsen, Kevin (2003-05-16). "Matrix Sequel Has Hacker Cred". The Register. Retrieved 2018-10-29. /wiki/Kevin_Poulsen ↩
Haines, J.; Ryder, D.K.; Tinnel, L.; Taylor, S. (2003-02-19). "Validation of sensor alert correlators". IEEE Security & Privacy. 99 (1): 46–56. doi:10.1109/MSECP.2003.1176995. /wiki/IEEE_Security_%26_Privacy ↩
Medeiros, João Paulo S.; Brito Jr., Agostinho M.; Pires, Paulo S. Motta (2009). "A Data Mining Based Analysis of Nmap Operating System Fingerprint Database". Computational Intelligence in Security for Information Systems. Advances in Intelligent and Soft Computing. Vol. 63. pp. 1–8. doi:10.1007/978-3-642-04091-7_1. ISBN 978-3-642-04090-0. 978-3-642-04090-0 ↩