New Training: Pentest Enumeration and NMAP
In this 8-video skill, CBT Nuggets trainer Bob Salmans takes you through the enumeration phase of a pentesting engagement. This is where we identify all that we can about a target using several tools and hopefully identifying some vulnerabilities that we can later exploit. Watch this new CompTIA training.
Learn CompTIA with one of these courses:
This training includes:
8 videos
53 minutes of training
You’ll learn these topics in this skill:
Intro to Pentesting Enumeration
Pentest Enumeration Tools
Basic NMAP Commands
Ping Scans with NMAP
Scanning TCP and UDP with NMAP
Identifying Host Attributes with NMAP
Using NMAP Scripts
Bypassing Firewalls with NMAP
Why NMAP Must Be in Your Pentesting Toolkit
NMAP is a free, open-source network scanning tool popular with IT admins and pentesters. Given its power, it's no surprise that NMAP is as standard a tool as Wireshark. But why?
First, because NMAP is free and open-source, it's widely available with a large community to back it. In fact, NMAP comes pre-installed in popular Linux distros like Kali. With a large community backing NMAP, learning to use it is simple.
NMAP is powerful. This tool can easily map a network, clients on that network, their OSes, and potential vulnerabilities quickly. Likewise, NMAP can work around roadblocks like firewalls and VLANs.
NMAP is extensible. If NMAP doesn't have a function that you need, there's a good chance that someone has created a script for that feature. Writing scripts for NMAP is easy and enhances the functionality of this tool far beyond what it was originally meant to handle.
If NMAP hasn't become a standard tool in your pentesting toolbox, you need to consider learning more about it. Though NMAP can be simple to learn and use, mastering NMAP will make you a pentesting guru.
