Security · Beginner

Nmap online course

Discover hosts and ports on networks you are allowed to test. Nmap is a lab tool here, not a toy for random address space.

Who it is for

Students and junior defenders learning how their own lab looks from the outside.

You should already know

A lab network you own or have written permission to scan.

You will be able to

  • Find live hosts
  • Choose a port-scan technique
  • Read service and version output

Lessons

  1. What Is Nmap? Network Discovery and Port Scanning Explained Learn what Nmap is, how host discovery, port scanning, service detection, OS fingerprinting, and NSE work, plus safe authorized scanning practices.
  2. Host discovery Ping sweeps and when ICMP is the wrong question.
  3. Port scans SYN scan, connect scan, and what “filtered” actually means.
  4. Service detection Ask Nmap what is listening, then verify it yourself.
  5. Determine a Host Operating System with Nmap Learn how Nmap estimates a host operating system through TCP/IP fingerprinting, interpret OS results, understand accuracy limits, and validate findings in an authorized environment.
  6. Disable Host Discovery in Nmap with -Pn Learn how Nmap host discovery works, why live hosts may appear down, and how to use -Pn to scan authorized targets without preliminary discovery.
  7. What Is Zenmap? The Nmap Graphical Interface Learn what Zenmap is, how it uses Nmap, and how to create, run, review, compare, and repeat authorized network scans through a graphical interface.
  8. Adjust Delay Between Nmap Probes with --scan-delay Learn how Nmap's --scan-delay option controls the pause between probes, affects scan duration, and differs from timing templates and rate controls.
  9. Determine Service Versions with Nmap Learn how Nmap service version detection works, how to use -sV, interpret scan output, and validate identified services responsibly.
  10. Discover Live Hosts with an Nmap TCP SYN Ping Scan Learn how Nmap TCP SYN host discovery uses -PS and -sn to identify reachable hosts when ICMP ping may be blocked or filtered.
  11. Discover Whether Hosts Are Online with Nmap Host Discovery Learn how to use Nmap -sn to discover responsive hosts on a single IP address or CIDR network without performing a port scan.
  12. Running and Interpreting an Example Scan in Zenmap Learn how to run an authorized Nmap scan in Zenmap, review profiles and commands, interpret port states, and save useful results.
  13. How to Install Kali Linux for Nmap Learn how to install Kali Linux on dedicated hardware or in a virtual machine, configure the system safely, and verify Nmap after installation.
  14. How to Install Nmap on Ubuntu Linux Learn how to check whether Nmap is installed, refresh Ubuntu package information, install Nmap with APT, and verify the installation from a terminal.
  15. How to Install Nmap on Windows Learn how to download and install Nmap on Windows, choose Zenmap or command-line tools, verify the installation, and understand Windows scanning limitations.
  16. How to Interpret Zenmap Scan Results Learn how to read Zenmap scan results, understand port states, compare hosts and services, use topology and host details, and avoid common interpretation mistakes.
  17. IPv4 Addresses: Structure, Assignment, and Identification Learn how IPv4 addresses identify network interfaces, how CIDR separates network and host portions, how DHCP assigns addresses, and how to view IP configuration on Windows and Linux.
  18. Understanding the IPv4 Header Learn the IPv4 header fields, fragmentation, TTL, protocol values, checksums, options, packet captures, and their relationship to Nmap diagnostics.
  19. MAC Addresses: Structure, Purpose, and How to Find Them Learn what MAC addresses are, how 48-bit Ethernet addresses are structured, what OUIs and address bits mean, and how to find MAC addresses on Windows and Linux.
  20. Nmap Tutorial: Network Discovery, Port Scanning, and Scan Results Learn how to install and use Nmap for authorized host discovery, TCP and UDP port scanning, service detection, timing, output, and result interpretation.
  21. Understanding the OSI Model for Nmap and Network Fundamentals Learn the seven OSI networking layers, common protocols, data units, troubleshooting uses, and how OSI concepts help you interpret Nmap results.
  22. Nmap Packet Trace: Viewing and Interpreting Sent and Received Packets Learn how to use Nmap --packet-trace to inspect sent and received packets, interpret TCP and ICMP responses, troubleshoot filtering, and correlate trace data with scan results.
  23. Understanding Nmap Port States Learn what Nmap open, closed, filtered, unfiltered, open|filtered, and closed|filtered states mean and how to interpret scan results responsibly.
  24. Private IPv4 Addresses Learn RFC 1918 private IPv4 ranges, CIDR masks, address reuse, routing, NAT, overlap, and authorized Nmap discovery.
  25. Save Nmap Scan Output in Normal, XML, Grepable, and All Formats Learn how to save Nmap results with -oN, -oX, -oG, and -oA, inspect saved files, choose formats, and protect scan artifacts.
  26. How to Specify Multiple Targets and IP Address Ranges in Nmap Learn how to scan multiple Nmap targets, CIDR networks, and target-list files with -iL, plus interpret multi-host results and avoid scope mistakes.
  27. Specify Port Ranges in Nmap Learn how to scan individual Nmap ports, inclusive ranges, excluded ports, and reduced fast-scan lists while interpreting open, closed, and filtered results.
  28. Getting Started with Nmap: Installation, Basic Scans, and Reading Results Learn how to verify and install Nmap on Debian-based Linux, run an authorized default scan, and interpret hosts, ports, services, and port states.
  29. TCP and UDP Ports Learn how TCP and UDP ports identify application endpoints, how source and destination ports support client-server communication, and how port ranges and default services work.
  30. TCP/IP Suite of Protocols: Layers, Roles, and Common Protocols Learn how the TCP/IP protocol suite works, including its four layers, encapsulation, addressing, common protocols, and how TCP/IP concepts help interpret Nmap results.
  31. Understand Nmap --reason Output Learn how Nmap --reason explains host and port states using responses such as SYN-ACK, reset, no-response, TTL, and latency.
  32. Nmap Timing Options: Scan Speed, Accuracy, and Timing Templates Learn how Nmap timing templates from -T0 to -T5 affect scan speed, retries, accuracy, and operational safety, with practical comparison and troubleshooting guidance.
  33. Transmission Control Protocol (TCP) Learn how TCP establishes connections, delivers reliable ordered data, uses ports and header fields, closes sessions, and supports Nmap TCP scanning.
  34. UDP Scanning with Nmap Learn how Nmap's -sU option discovers UDP services, interprets open, closed, and open|filtered states, and validates findings safely.
  35. User Datagram Protocol (UDP): Concepts, Header Fields, and Use Cases Learn how UDP works at OSI Layer 4, including connectionless delivery, ports, the 8-byte header, checksum, reliability trade-offs, and UDP versus TCP.
  36. What Is Nmap? Network Discovery and Security Scanning Basics Learn what Nmap is, how host discovery, port scanning, service detection, OS fingerprinting, and NSE work, and how to use Nmap safely on authorized networks.