search

1. Full TCP Port Scan on Target Host

hashtag
1. Full TCP Port Scan on Target Host

To begin any pentest, you must discover what services the machine is running. A full TCP port scan helps uncover all active ports, even if services are running on unusual ports.

Tool Used: nmap

Chosen for its speed, versatility, and accuracy in network scanning.

nmap -Pn -sS -p- 192.168.10.4

  • -Pn: Skip ping (Treat host as online)

  • -sS: SYN scan for stealth and speed (if you are not root, run it with sudo)

  • -p-: Scan all 65535 TCP ports

Hints & Tips:

  1. Always scan all ports (-p-) to avoid missing hidden services.

  2. Use -Pn if ICMP is blocked or when you treat host as online.

PreviousReconnaissance PhaseNext2. Service and Version Detection

Last updated