I’ve been reading this article Use NMAP 7 to Discover Vulnerabilities, Launch DoS Attacks and More! It says nmap can do several things, including:
[list=1][] Auth: Use to test whether you can bypass authentication mechanism.
[]Broadcast: Use to find other hosts on the network and automatically add them to scanning que.
[]Brute: Use for brute password guessing.
[]Discovery: Use to discover more about the network.
[]Dos: Use to test whether a target is vulnerable to DoS
[]Exploit: Use to actively exploit a vulnerability
[]Fuzzer: Use to test how server responds to unexpected or randomized fields in packets and determine other potential vulnerabilities
[]Intrusive: Use to perform more intense scans that pose a much higher risk of being detected by admins.
[]Malware: Use to test target for presence of malware
[]Safe: Use to perform general network security scan that’s less likely to alarm remote administrators
[*]Vuln: Use to find vulnerabilities on the target[/list]
And up until now, I’ve been scanning ports only. Noob.
What do you think about it? Did you know about this side of nmap? Have you read other articles about it?