Master Network Scanning, Vulnerability Discovery & Security Auditing
This course outline is designed for cybersecurity professionals, network administrators, and ethical hackers who want to master Nmap (Network Mapper). The curriculum moves from foundational concepts to advanced techniques, including stealth scanning, firewall evasion, and custom scripting with the Nmap Scripting Engine (NSE).
🎯 Target Audience: Network administrators, security analysts, penetration testers, SOC professionals, and cybersecurity enthusiasts.
📋 Prerequisites: Basic networking knowledge (IP addressing, TCP/UDP protocols, ports) and familiarity with Linux/Windows command line.
🏅 Certification: Upon completion, candidates demonstrate proficiency in network discovery, vulnerability assessment, and security auditing using Nmap.
Learning Objectives:
Topics:
Learning Objectives:
Topics:
Learning Objectives:
Topics:
Learning Objectives:
Topics:
Learning Objectives:
Topics:
Learning Objectives:
Topics:
Learning Objectives:
Topics:
Learning Objectives:
Topics:
Learning Objectives:
Topics:
Participants are evaluated through:
🎓 Certification: Upon successful completion, participants receive a Certified Nmap Expert certificate, validating their expertise in network scanning, vulnerability detection, and security auditing.
| Resource Type | Examples |
|---|---|
| Hands-on labs | Kali Linux, Metasploitable targets |
| Reference guides | Nmap official documentation, man pages |
| Visualization tools | Zenmap, WebMap, Sparta |
| Integration tools | Metasploit, Wireshark, Faraday IDE |
| Output analysis | XML, grepable, JSON parsers |
This course provides a complete pathway from Nmap beginner to certified expert,
with strong emphasis on practical, hands-on skills essential for modern cybersecurity roles.
Welcome, young network detective! You have already learned so much about Nmap – from basic scans to advanced techniques. Now, in Module 6, we will explore how Nmap is used in the cloud and how to automate your scanning tasks. More and more companies are using cloud services like AWS, Azure, and Google Cloud. You need to know how to scan these environments safely and effectively. You will also learn how to make Nmap do its work automatically, saving you time and effort. Let's dive into the world of cloud scanning and automation!
By the end of this module, you will be able to:
In Lagos, a fast-growing company called CloudTech moved all its servers to the cloud. They used Amazon Web Services (AWS). The security team needed to make sure everything was safe. They couldn't physically visit the servers – they were in data centers far away. So, they used Nmap to scan their cloud resources. But scanning in the cloud was different. They had to be careful not to disrupt other services. They also used automation to run scans every day. This helped them catch security problems quickly. The company became one of the most secure in Nigeria, all thanks to Nmap and automation!
Definition: Cloud computing means using remote servers on the internet to store, manage, and process data.
Why it's important: Many companies use the cloud instead of owning physical servers.
Simple explanation: Like renting a storage unit instead of building a garage.
Real-life example: Using Google Drive to store your photos.
School example: A school using an online portal for assignments.
Home example: You use a cloud service to back up your phone.
Nigerian example: Nigerian companies use AWS, Azure, or Google Cloud.
Illustration:
+-------------------+
| Your Computer |
+-------------------+
|
V
+-------------------+
| Cloud (Internet)|
| AWS, Azure, GCP |
+-------------------+
✅ Mini summary: Cloud computing is using remote servers over the internet.
Definition: Cloud environments have unique features that change how you scan.
Why it's important: You need to know these differences to scan effectively.
Simple explanation: Like having different tools for building a house vs. a skyscraper.
Real-life example: A car and a truck are both vehicles but have different uses.
School example: You have different classes for different subjects.
Home example: You use different cleaning tools for different rooms.
Nigerian example: Nigerian cloud admins must understand these differences.
Illustration:
Differences: ------------ - Resources are virtual (not physical) - IP addresses change often - Firewalls are software-based - You need cloud provider permission - Scanning may trigger security alerts
✅ Mini summary: Cloud scanning requires understanding of virtual environments.
Definition: AWS (Amazon Web Services) is the most popular cloud platform.
Why it's important: Many Nigerian companies use AWS.
Simple explanation: Like learning to use a specific tool in a workshop.
Real-life example: A company uses AWS for its website.
School example: A school uses AWS for its online learning platform.
Home example: You use AWS to host a gaming server.
Nigerian example: Nigerian startups often use AWS.
Illustration:
AWS Scanning Tips: ------------------ - Use EC2 instance public IPs - Check security groups (firewall rules) - Use IAM roles for permissions - Scan only your own resources - Use CloudWatch to monitor
✅ Mini summary: AWS scanning requires understanding of EC2, security groups, and IAM.
Definition: Azure is Microsoft's cloud platform.
Why it's important: Many companies also use Azure.
Simple explanation: Like learning to use a different brand of tool.
Real-life example: A company uses Azure for its business apps.
School example: A school uses Microsoft Teams for classes.
Home example: You use Azure for a personal project.
Nigerian example: Nigerian companies often use Azure for enterprise solutions.
Illustration:
Azure Scanning Tips: -------------------- - Use Virtual Machine public IPs - Check Network Security Groups (NSG) - Use Azure Active Directory for permissions - Scan only your resources - Use Azure Monitor for alerts
✅ Mini summary: Azure scanning is similar to AWS but with different terminology.
Definition: Google Cloud Platform (GCP) is Google's cloud service.
Why it's important: Some companies use GCP.
Simple explanation: Like learning to use yet another tool.
Real-life example: A startup uses GCP for its app.
School example: A school uses Google Classroom.
Home example: You use GCP for a hobby project.
Nigerian example: Some Nigerian tech companies use GCP.
Illustration:
GCP Scanning Tips: ------------------ - Use Compute Engine public IPs - Check firewall rules - Use IAM for permissions - Scan only your own instances - Use Stackdriver for monitoring
✅ Mini summary: GCP scanning has its own terminology and tools.
Definition: Cloud providers may block your scans if they detect unusual activity.
Why it's important: You need to scan without being blocked.
Simple explanation: Like not being too loud in a library.
Real-life example: You can't run in a hospital.
School example: You can't shout in the classroom.
Home example: You can't play loud music late at night.
Nigerian example: Nigerian admins must follow cloud provider rules.
Illustration:
Avoid Blocks: ------------- - Use slow timing (T2 or T3) - Use SYN scan (less intrusive) - Limit concurrent hosts - Scan during off-peak hours - Get proper permissions
✅ Mini summary: Follow cloud provider rules to avoid being blocked.
Definition: Automation means making tasks run without human help.
Why it's important: It saves time and ensures consistency.
Simple explanation: Like having a robot do your chores.
Real-life example: A factory uses robots to build cars.
School example: A teacher uses a computer to grade tests.
Home example: You use a timer to water your plants.
Nigerian example: Nigerian companies automate security scans.
Illustration:
Manual: You do everything yourself. Automated: A program does it for you.
✅ Mini summary: Automation makes tasks run automatically.
Definition: Cron is a tool that runs commands on a schedule in Linux.
Why it's important: It's a simple way to automate Nmap scans.
Simple explanation: Like setting an alarm clock for a task.
Real-life example: You set a reminder on your phone.
School example: You have a fixed schedule for classes.
Home example: You have a routine for chores.
Nigerian example: Nigerian admins use cron for scheduled scans.
Illustration:
Cron Example: ------------ 0 2 * * * nmap -sn 192.168.1.0/24 > /logs/ping.txt This runs a ping scan every day at 2 AM.
✅ Mini summary: Cron schedules Nmap scans to run automatically.
Definition: A Bash script is a file with commands that run in order.
Why it's important: Scripts can run multiple Nmap commands and process results.
Simple explanation: Like a recipe that tells you how to cook a meal.
Real-life example: A chef follows a recipe to cook.
School example: You follow instructions for a science experiment.
Home example: You follow a DIY guide to build something.
Nigerian example: Nigerian admins write Bash scripts for complex scans.
Illustration:
Bash Script Example: -------------------- #!/bin/bash nmap -sn 192.168.1.0/24 nmap -sV 192.168.1.1 echo "Scan complete!"
✅ Mini summary: Bash scripts automate multiple Nmap tasks.
Definition: Python is a programming language that can control Nmap.
Why it's important: Python offers more advanced automation capabilities.
Simple explanation: Like writing a program that gives instructions to Nmap.
Real-life example: A programmer writes code to automate a task.
School example: You use a computer to solve math problems.
Home example: You program a smart light to turn on at sunset.
Nigerian example: Nigerian developers use Python for Nmap automation.
Illustration:
Python Example:
---------------
import nmap
nm = nmap.PortScanner()
nm.scan('192.168.1.1', '22-443')
for host in nm.all_hosts():
print(host, nm[host].state())
✅ Mini summary: Python provides advanced automation for Nmap.
Definition: Ansible is a tool that automates IT tasks across multiple servers.
Why it's important: It can run Nmap on many machines at once.
Simple explanation: Like having a team of robots that you control.
Real-life example: A manager directs a team of workers.
School example: A teacher guides a whole class.
Home example: You manage multiple smart devices.
Nigerian example: Nigerian companies use Ansible for cloud automation.
Illustration:
Ansible Example:
----------------
- name: Scan network with Nmap
command: nmap -sn 192.168.1.0/24
register: result
✅ Mini summary: Ansible automates Nmap across many servers.
Definition: Continuous monitoring means scanning regularly and automatically.
Why it's important: Networks change constantly – you need to keep watching.
Simple explanation: Like checking your security cameras all the time.
Real-life example: A security guard watches monitors.
School example: A teacher monitors students.
Home example: You check your door locks every night.
Nigerian example: Nigerian companies monitor their networks 24/7.
Illustration:
Continuous Monitoring: ---------------------- Daily: Ping scan Weekly: Port scan Monthly: Vulnerability scan Quarterly: Full assessment
✅ Mini summary: Continuous monitoring keeps networks secure over time.
Definition: Cloud security tools like AWS Inspector or Azure Security Center can work with Nmap.
Why it's important: They provide extra protection and insights.
Simple explanation: Like having multiple security guards working together.
Real-life example: A building has both cameras and guards.
School example: A school has teachers and monitors.
Home example: You have both locks and lights.
Nigerian example: Nigerian companies use Nmap with cloud security tools.
Illustration:
Integration: ------------ Nmap --> AWS Inspector Nmap --> Azure Security Center Nmap --> GCP Security Command Center
✅ Mini summary: Nmap works with cloud security tools for better protection.
Definition: You have learned how to use Nmap in the cloud and automate scans.
Why it's important: These are essential skills for modern cybersecurity.
Simple explanation: You have learned advanced skills for modern networks.
Real-life example: A pilot learns to fly in different weather.
School example: You have learned a new subject.
Home example: You have learned a new hobby.
Nigerian example: A Nigerian IT pro now has cloud and automation skills.
Illustration:
In this module, you learned: - Cloud computing basics - AWS, Azure, GCP scanning - Avoiding cloud provider blocks - Automation with cron, Bash, Python, Ansible - Continuous monitoring - Integration with cloud security tools
✅ Mini summary: You have mastered cloud scanning and automation.
Definition: You have completed the entire Certified Nmap User course!
Why it's important: You now have valuable skills for cybersecurity.
Simple explanation: You have graduated from the Nmap Academy!
Real-life example: A student graduates from school.
School example: You finish the school year.
Home example: You complete a big project.
Nigerian example: You become a certified cybersecurity professional.
Illustration:
What you have learned: ---------------------- Module 1: Basics of Nmap Module 2: Advanced scanning Module 3: NSE scripts Module 4: Real-world Nmap Module 5: Advanced techniques Module 6: Cloud & Automation
✅ Mini summary: You have completed the entire Certified Nmap User course!
crontab -e0 2 * * * nmap -sn 192.168.1.0/24nano scan.shchmod +x scan.sh./scan.shpip install python-nmappython scan.py
+-------------------+
| Public Internet |
+-------------------+
|
V
+-------------------+
| Cloud Provider |
| (AWS/Azure/GCP) |
+-------------------+
|
+-------+-------+
| | |
V V V
+---+ +---+ +---+
|EC2| |S3 | |RDS|
+---+ +---+ +---+
Start
|
V
Daily Ping Scan
|
V
Weekly Port Scan
|
V
Monthly Vulnerability Scan
|
V
Quarterly Full Assessment
|
V
Report Findings
|
V
End
| Feature | AWS | Azure | GCP |
|---|---|---|---|
| Compute | EC2 | Virtual Machines | Compute Engine |
| Storage | S3 | Blob Storage | Cloud Storage |
| Database | RDS | Azure SQL | Cloud SQL |
| Firewall | Security Groups | NSG | Firewall Rules |
Simple -> Cron Medium -> Bash Scripts Advanced -> Python Enterprise -> Ansible
You have completed Module 6 – the final module of the Certified Nmap User course. You have learned how to use Nmap in cloud environments like AWS, Azure, and GCP. You also learned how to automate scans using cron, Bash, Python, and Ansible. You now understand the importance of continuous monitoring and integration with cloud security tools. You are truly a Certified Nmap User!
Match the term to its definition:
| Term | Definition |
|---|---|
| 1. AWS | A. Amazon's cloud |
| 2. Azure | B. Microsoft's cloud |
| 3. GCP | C. Google's cloud |
| 4. Cron | D. Scheduler |
| 5. Python | E. Programming language |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: You are a security analyst at a company that uses AWS. You need to scan your EC2 instances for open ports. How would you do this safely?
Scenario 2: Your manager wants you to automate daily scans of your network. What automation tools would you use and how?
In groups of 3-4, design a cloud security monitoring plan. Include what to scan, how often, and what automation tools to use. Present your plan to the class.
Write a Bash script that runs a ping scan and saves the results to a file. Schedule it to run daily using cron.
Create a complete cloud scanning plan for a fictional company called "CloudSafe". Include scanning strategies, automation tools, and a monitoring schedule.
Set up a free tier AWS account. Launch an EC2 instance. Use Nmap to scan your instance. Document the process and results.
Write a Python script that scans a range of IPs, saves the results in XML format, and parses the results to find open SSH ports. Submit the script and a sample output.
Multiple choice answers are provided above. Fill-in-the-blank answers:
You have now completed the Certified Nmap User course. You are ready to continue your journey in cybersecurity. Consider learning more about other tools like Metasploit, Wireshark, or Python for automation. The world of cybersecurity is vast and exciting. Keep learning, keep practicing, and always use your skills for good!
🎉 Congratulations! You have completed the Certified Nmap User course. 🎉
You are now a Certified Nmap User!
Welcome, young explorer! Have you ever wondered how we know what computers are connected to a network? Or how security experts find out if someone is trying to break into a system? That's where Nmap comes in! Nmap is a special tool that helps us see all the devices on a network, like a map of a city. In this module, we will learn what Nmap is, why it's important, and how we can use it safely and responsibly. We'll use stories, examples, and lots of fun pictures to make everything clear. By the end, you will be ready to start your journey as a Certified Nmap User!
By the end of this module, you will be able to:
Once upon a time, in a busy city called Cyberville, there was a young detective named Kemi. Kemi's job was to keep the city's computers safe. But there was a problem – the city had hundreds of computers, and nobody knew exactly what was connected to the network. It was like having a city without a map!
One day, an old wise woman gave Kemi a magical tool called Nmap. "This tool will help you see every device on your network," she said. "It's like a map that shows you all the buildings, roads, and secret passages."
Kemi used Nmap and discovered that a computer she didn't know about was connected to the network. It was a hacker trying to steal information! Thanks to Nmap, Kemi caught the hacker and saved the city. From that day on, Kemi used Nmap every day to keep the network safe and organized.
And that, young explorer, is exactly what we are going to learn – how to use the magical map called Nmap!
Definition: Nmap (short for Network Mapper) is a free and open-source tool used to discover devices and services on a computer network.
Why it's important: Nmap helps us see what's on a network, find open doors (ports), and check for security problems.
Simple explanation: Think of Nmap as a flashlight in a dark room. It shines light on all the computers and shows you what's there.
Real-life example: A school uses Nmap to see all the computers in the computer lab.
School example: Your teacher uses a class list to know who is present – Nmap does that for computers.
Home example: You count how many devices are connected to your home Wi-Fi.
Nigerian example: A Nigerian bank uses Nmap to monitor all its ATMs and branch computers.
Illustration:
+-------------------+
| Nmap |
| (Network Mapper) |
+-------------------+
|
V
+-------------------+
| Discovers all |
| devices on the |
| network |
+-------------------+
✅ Mini summary: Nmap is a tool that helps us see all the devices on a network.
Definition: We need Nmap to understand what's on our network, find problems, and protect our computers.
Why it's important: Without Nmap, we wouldn't know if an unknown device is connected to our network.
Simple explanation: Imagine you have a house with many rooms. Nmap helps you check if someone is in a room you didn't know about.
Real-life example: A company uses Nmap to ensure only authorized computers are on their network.
School example: A school uses Nmap to check if students are using the school Wi-Fi with unauthorized devices.
Home example: You use Nmap to see if a neighbor is using your Wi-Fi without permission.
Nigerian example: A Nigerian ISP uses Nmap to monitor their network for security threats.
Illustration:
Network without Nmap ---> Unknown devices ---> Danger! Network with Nmap ---> Known devices ---> Safe!
✅ Mini summary: Nmap helps keep networks safe by showing us what's connected.
Definition: A network is a group of computers and devices connected together so they can share information.
Why it's important: Networks allow us to share files, print documents, and use the internet.
Simple explanation: A network is like a web that connects all your devices.
Real-life example: The internet is one big network that connects computers all over the world.
School example: A school network connects all the computers in the lab so they can share files.
Home example: Your home Wi-Fi connects your phone, laptop, and smart TV.
Nigerian example: A Nigerian university has a network that connects all its campuses.
Illustration:
+--------+ +--------+ +--------+
|Computer|-----|Computer|-----|Computer|
+--------+ +--------+ +--------+
| | |
+--------------+--------------+
|
+--------+
| Printer|
+--------+
✅ Mini summary: A network is a group of connected devices that share information.
Definition: An IP address is a unique number that identifies every device on a network, like a house address.
Why it's important: IP addresses help data find its way to the right device.
Simple explanation: Just like your home has a unique address, each computer has a unique IP address.
Real-life example: When you send a letter, you need an address – computers need IP addresses too.
School example: Each student has a unique desk number in a classroom.
Home example: Your house number helps delivery people find you.
Nigerian example: Every bank ATM in Nigeria has a unique IP address.
Illustration:
+------------------+
| Computer A |
| IP: 192.168.1.1 |
+------------------+
|
V
+------------------+
| Computer B |
| IP: 192.168.1.2 |
+------------------+
✅ Mini summary: An IP address is a unique number that identifies each device on a network.
Definition: A port is like a door on a computer that allows different types of communication.
Why it's important: Ports help computers know what kind of data is coming in and out.
Simple explanation: Think of your house having different doors – one for visitors, one for deliveries, one for family. Ports work the same way for computers.
Real-life example: Port 80 is used for web traffic (HTTP), and port 443 is used for secure web traffic (HTTPS).
School example: A school has different doors for students, teachers, and visitors.
Home example: Your front door is for guests, and the kitchen door is for groceries.
Nigerian example: A Nigerian e-commerce site uses port 443 to secure customer transactions.
Illustration:
+------------------+ | Computer | | +------------+ | | | Port 80 | | <-- Web traffic | +------------+ | | | Port 443 | | <-- Secure web traffic | +------------+ | | | Port 21 | | <-- File transfer | +------------+ | +------------------+
✅ Mini summary: Ports are like doors on a computer that let different types of data in and out.
Definition: Installing means putting the Nmap software on your computer so you can use it.
Why it's important: You can't use Nmap without installing it first!
Simple explanation: Installing Nmap is like downloading a new game or app.
Real-life example: You download a game from the app store – installing Nmap is similar.
School example: The school installs new software on the lab computers for learning.
Home example: You install a new app on your tablet.
Nigerian example: A Nigerian IT company installs Nmap on their security team's computers.
Illustration:
Step 1: Download Nmap from the official website
|
V
Step 2: Run the installer
|
V
Step 3: Follow the instructions on the screen
|
V
Step 4: Nmap is installed and ready to use!
✅ Mini summary: Installing Nmap is easy – just download and run the installer.
Definition: A scan is when Nmap checks a network to find out what devices are there.
Why it's important: The scan shows you all the devices on your network.
Simple explanation: Running an Nmap scan is like turning on a flashlight to see what's in a dark room.
Real-life example: A security guard does a patrol to check all doors are locked – Nmap does that for networks.
School example: The teacher calls attendance to see who is in class.
Home example: You look around your room to see what toys you have.
Nigerian example: A Nigerian network administrator scans the office network every morning.
Illustration:
Command: nmap 192.168.1.1
|
V
Result:
Starting Nmap ...
Interesting ports on 192.168.1.1:
80/tcp open http
443/tcp open https
✅ Mini summary: A scan tells us what devices and services are on a network.
Definition: Scan results are the information Nmap shows you after a scan.
Why it's important: You need to understand the results to know what's on your network.
Simple explanation: Scan results are like a report card that tells you what's working and what's not.
Real-life example: A doctor reads your test results to understand your health.
School example: You read your report card to see your grades.
Home example: You check the weather report to know if you need an umbrella.
Nigerian example: A Nigerian IT team reads Nmap results to find any open ports that need to be closed.
Illustration:
Scan Result Example: -------------------- Host: 192.168.1.1 State: Up (reachable) Ports: 22/tcp open ssh (Secure Shell) 80/tcp open http (Web Server) 443/tcp open https (Secure Web Server)
✅ Mini summary: Scan results tell you what devices and services are on the network.
Definition: A port state tells us if a port is open, closed, or filtered.
Why it's important: Open ports can be entry points for hackers, so we need to know about them.
Simple explanation: A port state is like a door that is open, closed, or locked.
Real-life example: If your front door is open, anyone can come in – open ports are the same.
School example: A classroom door can be open (students can enter) or closed (no entry).
Home example: A window can be open, closed, or locked.
Nigerian example: A Nigerian bank makes sure all unnecessary ports are closed for security.
Illustration:
Port States: ------------ OPEN : The door is open – anyone can enter. CLOSED : The door is closed – no entry. FILTERED: The door is locked and guarded – no entry.
✅ Mini summary: Port states tell us if a port is open, closed, or filtered.
Definition: Commands are the instructions you type to tell Nmap what to do.
Why it's important: You need to know basic commands to use Nmap effectively.
Simple explanation: Commands are like magic words that tell Nmap to perform tasks.
Real-life example: You tell your dog "sit" or "stay" – commands work the same way.
School example: Your teacher says "line up" – that's a command.
Home example: You say "turn on" to your smart light.
Nigerian example: A Nigerian network admin uses "nmap -sn" to ping all devices on the network.
Illustration:
Common Commands: ---------------- nmap -sn 192.168.1.0/24 : Ping scan (find live hosts) nmap -sS 192.168.1.1 : Stealth SYN scan nmap -sV 192.168.1.1 : Version detection nmap -O 192.168.1.1 : Operating system detection nmap -A 192.168.1.1 : Aggressive scan (all features)
✅ Mini summary: Commands are instructions that tell Nmap what to scan and how.
Definition: Ethics means doing the right thing. Using Nmap legally means only scanning networks you own or have permission to scan.
Why it's important: Scanning without permission is illegal and can get you into big trouble.
Simple explanation: It's like not reading someone else's diary without asking – it's wrong.
Real-life example: You can't enter someone's house without permission – same for networks.
School example: You can't look at another student's test paper without permission.
Home example: You can't open your sibling's mail without permission.
Nigerian example: In Nigeria, unauthorized network scanning is illegal and can lead to jail time.
Illustration:
Ethical Use: Scan your own network or get permission. Unethical Use: Scan someone else's network without permission (illegal!).
✅ Mini summary: Always get permission before scanning any network.
Definition: Nmap is used by network administrators, security experts, and ethical hackers.
Why it's important: Nmap helps professionals keep networks safe and running smoothly.
Simple explanation: Nmap is like a Swiss Army knife for network professionals.
Real-life example: A company uses Nmap to check for unauthorized devices on their network.
School example: The school IT person uses Nmap to check if all computers are working.
Home example: You can use Nmap to see what devices are connected to your Wi-Fi.
Nigerian example: Nigerian telecom companies use Nmap to monitor their networks.
Illustration:
Uses of Nmap: ------------- - Find all devices on a network - Detect open ports - Identify operating systems - Discover services running on a device - Check for security vulnerabilities
✅ Mini summary: Nmap has many real-world uses for network professionals.
Definition: Nmap works by sending small packets of data to a target and analyzing the responses.
Why it's important: Understanding how it works helps us use it better.
Simple explanation: Nmap knocks on doors (ports) and listens for answers.
Real-life example: You knock on a door and wait for someone to answer – Nmap does this with ports.
School example: The teacher calls your name and waits for you to say "present".
Home example: You call out "hello" and wait for a response.
Nigerian example: A Nigerian network admin uses Nmap to check if servers are responding.
Illustration:
Nmap sends a packet -----> Target receives it
|
V
Nmap waits for response
|
V
If response is received, port is open.
If no response, port is closed or filtered.
✅ Mini summary: Nmap sends packets and listens for responses to find out about devices.
Definition: Different scan types use different methods to discover devices and services.
Why it's important: Different situations need different types of scans.
Simple explanation: A ping scan is like a quick hello, while a SYN scan is like a more detailed check.
Real-life example: A quick wave vs. a full handshake – both are greetings, but one is more detailed.
School example: A quick attendance check vs. a detailed exam.
Home example: A quick look vs. a thorough search.
Nigerian example: Nigerian network admins use ping scans for quick checks and SYN scans for detailed audits.
Illustration:
Scan Types: ----------- 1. Ping Scan (-sn) : Quick check if device is alive. 2. SYN Scan (-sS) : Stealth scan (less noticeable). 3. TCP Connect (-sT) : Normal connection (more noticeable). 4. UDP Scan (-sU) : Scans UDP ports. 5. OS Detection (-O) : Determines the operating system.
✅ Mini summary: Different scan types are used for different purposes.
Definition: You have learned the basics of Nmap – what it is, how to install it, and how to run simple scans.
Why it's important: You are now ready to learn more advanced Nmap techniques in future modules.
Simple explanation: You have taken your first step on an exciting journey into the world of network security!
Real-life example: Like learning the alphabet before reading books.
School example: You learned your numbers before doing math.
Home example: You learned to walk before you could run.
Nigerian example: A Nigerian security professional started with Nmap basics and now protects big companies.
Illustration:
Your Nmap Journey:
------------------
Module 1: Basics (You are here!)
|
V
Module 2: More scans and techniques
|
V
Module 3: Advanced features and scripts
|
V
Certified Nmap User!
✅ Mini summary: You have learned the basics and are ready for more!
nmap 192.168.1.1 (replace with your own IP address).
+----------+ +----------+ +----------+
| Laptop | | Desktop | | Server |
| IP: .1 |-----| IP: .2 |-----| IP: .3 |
+----------+ +----------+ +----------+
| | |
+----------------+----------------+
|
+---------+
| Router |
| IP: .254|
+---------+
Start
|
V
Send packet to target
|
V
Wait for response
|
V
+-------------------+
| Response received?|
+-------------------+
| Yes | No
V V
Port is open Port is closed/filtered
|
V
Show result
|
V
End
| Scan Type | Command | Description |
|---|---|---|
| Ping Scan | nmap -sn | Quick check if host is alive |
| SYN Scan | nmap -sS | Stealth scan (doesn't complete handshake) |
| TCP Connect | nmap -sT | Complete connection (more noticeable) |
| UDP Scan | nmap -sU | Scans UDP ports |
| Version Detection | nmap -sV | Determines service version |
1997 : Nmap 1.0 released 1998 : Nmap 2.0 with new features 2000 : Nmap 3.0 with OS detection 2005 : Nmap 4.0 with scripting engine 2010 : Nmap 5.0 with better performance 2015 : Nmap 7.0 with advanced features 2024 : Nmap continues to be updated
Congratulations! You have completed Module 1 of the Certified Nmap User course. You have learned what Nmap is, why it's important, and how to use it for basic network discovery. You now know about IP addresses, ports, and the different states ports can be in. You've also learned about the importance of ethics and getting permission before scanning.
Remember, Nmap is a powerful tool that helps keep networks safe. But with great power comes great responsibility – always use Nmap ethically and legally. You are now ready to move on to Module 2, where we will explore more advanced scanning techniques.
Match the term to its definition:
| Term | Definition |
|---|---|
| 1. Nmap | A. A unique number for a device |
| 2. IP Address | B. A doorway for communication |
| 3. Port | C. A tool for network discovery |
| 4. Open Port | D. A port accepting connections |
| 5. Filtered Port | E. A port blocked by a firewall |
Answers: 1-C, 2-A, 3-B, 4-D, 5-E
Scenario 1: You are the IT person at a school. You notice the network is slow and you suspect someone is using unauthorized devices. How would you use Nmap to find out?
Scenario 2: A friend says they want to use Nmap to scan their neighbor's Wi-Fi because they think it's faster. What should you tell them and why?
In groups of 3-4, create a poster showing what Nmap is, how it works, and why it's important. Include examples of IP addresses, ports, and scan types. Present your poster to the class.
Using a home network (with permission), run a ping scan (nmap -sn) on your local network. Write down the IP addresses and the number of devices you found. If you don't have a network to scan, describe what you would expect to see.
Create a simple diagram of a network with 10 devices (computers, printers, routers, etc.). Label each device with an example IP address. Then, show how you would use Nmap to discover these devices.
Download and install Nmap on your computer (or a virtual machine). Run a ping scan on your home network and write a short report on what you found. Include the IP addresses and the number of devices detected.
Set up a virtual lab with two or more virtual machines. Install Nmap on one machine and use it to scan the other machine. Identify the open ports and services running. Write a step-by-step report of what you did and what you found.
Multiple choice answers are provided above. Fill-in-the-blank answers:
In Module 2, we will dive deeper into Nmap scanning techniques. You will learn about more advanced scans like OS detection and version detection. You will also learn how to use Nmap scripts to automate tasks. Get ready to take your Nmap skills to the next level!
🎉 Congratulations! You have completed Module 1 of the Certified Nmap User course. 🎉
You are now ready to move on to Module 2 – Advanced Scanning Techniques.
Welcome back, young network detective! In Module 1, we learned how to install Nmap and run our first basic scans. We discovered what IP addresses and ports are, and we understood the importance of ethics. Now, in Module 2, we are going to go deeper. We will explore more powerful scanning techniques that let us find out not just what is on a network, but how it works. We will learn how to detect operating systems, find service versions, and even use Nmap to check for vulnerabilities. Get ready to become a Certified Nmap User with advanced skills!
By the end of this module, you will be able to:
There was a detective named Chidi in Lagos. He was very good at his job, but sometimes he needed to investigate without people knowing he was there. One day, he had to check a suspected criminal's computer network. If the criminal knew Chidi was watching, he would erase all the evidence.
Chidi remembered a technique called SYN scanning. It was like knocking on a door but not waiting for the person to open it – you just listen to see if anyone is home. This way, the criminal never knew Chidi was there. Chidi found the evidence, caught the criminal, and saved the day.
In this module, we will learn this and other clever techniques that help us discover networks without being noticed.
Definition: A SYN scan (also called half-open scan) is a scanning technique that does not complete the full TCP handshake, making it harder to detect.
Why it's important: It allows you to scan without creating a full connection, which is stealthy.
Simple explanation: Imagine knocking on a door but walking away before anyone opens it – you just listen to see if someone is inside.
Real-life example: A security guard checks if doors are locked without opening them.
School example: You peek into a classroom to see if students are there, but you don't enter.
Home example: You check if your sibling is in their room by listening from outside.
Nigerian example: A Nigerian security team uses SYN scans to check for open ports on their servers without causing alarms.
Illustration:
SYN Scan (Stealth): Step 1: Send SYN (knock) Step 2: Receive SYN/ACK (response – someone is home) Step 3: Send RST (walk away) (No full connection is made)
✅ Mini summary: SYN scan is a stealthy way to check for open ports without completing a full connection.
Definition: A TCP Connect scan completes the full TCP three-way handshake, establishing a full connection.
Why it's important: It is more reliable and works on all systems, but it's less stealthy.
Simple explanation: You knock on a door, wait for someone to open it, and then have a conversation.
Real-life example: You walk into a store and talk to the shopkeeper.
School example: You enter the classroom and ask the teacher a question.
Home example: You go to your sibling's room and ask for a game.
Nigerian example: Nigerian network admins sometimes use TCP Connect scans when they need accurate results and don't worry about being stealthy.
Illustration:
TCP Connect Scan: Step 1: Send SYN (knock) Step 2: Receive SYN/ACK (door opens) Step 3: Send ACK (enter) (Full connection is established)
✅ Mini summary: TCP Connect scan completes a full handshake, making it more accurate but less stealthy.
Definition: A UDP scan is used to find open UDP ports, which are different from TCP ports.
Why it's important: Many services (like DNS, DHCP, and streaming) use UDP.
Simple explanation: TCP is like a phone call (connection), UDP is like sending a text message (no connection).
Real-life example: Sending a letter without expecting a reply (UDP) vs. calling someone (TCP).
School example: A teacher posts an announcement (UDP) vs. asking each student (TCP).
Home example: You leave a note on the fridge (UDP) vs. asking your parent directly (TCP).
Nigerian example: Nigerian ISPs use UDP scans to check DNS servers.
Illustration:
UDP Scan: Send UDP packet to port If no response: port might be open or filtered If ICMP error received: port is closed
✅ Mini summary: UDP scanning finds open UDP ports, which are used by many services.
Definition: OS detection is when Nmap analyzes responses to determine what operating system a device is running.
Why it's important: Knowing the OS helps you understand the device and its vulnerabilities.
Simple explanation: Like guessing if someone is a student, teacher, or principal by their behavior.
Real-life example: You can tell if a car is a Toyota or Honda by its shape.
School example: You can guess if someone is a student or teacher by how they dress.
Home example: You can tell if a gadget is an iPhone or Android by its design.
Nigerian example: Nigerian banks use OS detection to identify all the devices on their network.
Illustration:
Command: nmap -O 192.168.1.1 Result: OS: Linux 3.x
✅ Mini summary: OS detection tells you what operating system a device is using.
Definition: Service detection finds out what software is running on an open port, and sometimes its version.
Why it's important: Knowing the version helps you know if there are any known security issues.
Simple explanation: Like knowing that a restaurant serves Nigerian food (service) and which chef is cooking (version).
Real-life example: Knowing that a web server is running Apache 2.4.
School example: Knowing that a teacher teaches math (service) and has 5 years of experience (version).
Home example: Knowing that your TV is a Samsung Smart TV (service) and its model number (version).
Nigerian example: Nigerian e-commerce sites use version detection to ensure their web servers are up to date.
Illustration:
Command: nmap -sV 192.168.1.1 Result: 80/tcp open http Apache httpd 2.4.51
✅ Mini summary: Version detection finds the software and its version on open ports.
Definition: The aggressive scan combines OS detection, version detection, script scanning, and traceroute into one command.
Why it's important: It gives you a lot of information in one scan.
Simple explanation: Like having a Swiss army knife – it does many things at once.
Real-life example: A doctor does a full check-up (aggressive scan) instead of just checking one thing.
School example: Taking a comprehensive exam that tests all subjects.
Home example: Doing a full house cleaning, not just one room.
Nigerian example: Nigerian network admins use -A for quick comprehensive network audits.
Illustration:
Command: nmap -A 192.168.1.1 This runs: - OS detection - Version detection - Script scanning - Traceroute
✅ Mini summary: The aggressive scan (-A) gives you a comprehensive set of information.
Definition: Timing templates control how fast or slow Nmap scans. T0 is the slowest and stealthiest, T5 is the fastest.
Why it's important: Sometimes you need to be stealthy (slow) and sometimes you need speed.
Simple explanation: Like walking slowly to avoid making noise (stealth) or running fast to get somewhere quickly.
Real-life example: A spy moves slowly to avoid detection, while a security guard might run to check something.
School example: You walk slowly in a quiet library (stealth) but run to a fire drill (fast).
Home example: You tiptoe to avoid waking someone (stealth) but run to answer the door (fast).
Nigerian example: Nigerian network admins might use T2 for regular scans and T4 for emergency situations.
Illustration:
Timing Templates: T0: Very slow (stealthy, 5 minutes per port) T1: Slow T2: Normal T3: Fast T4: Very fast (might miss some) T5: Insane speed (least stealthy)
✅ Mini summary: Timing templates let you control the speed and stealth of your scans.
Definition: These are advanced scans that send packets with specific flags to evade detection.
Why it's important: They can sometimes get past firewalls that block standard scans.
Simple explanation: They use different "knock" patterns to see if the door is locked.
Real-life example: Trying different keys to see which one opens a lock.
School example: Asking different questions to see if a teacher responds.
Home example: Calling different ringtones to see if a phone is on.
Nigerian example: Nigerian security teams use these scans to test firewall rules.
Illustration:
FIN Scan (-sF): Send FIN packet (like saying "I'm done") NULL Scan (-sN): Send empty packet (no flags) XMAS Scan (-sX): Send FIN, PSH, URG (like a Christmas tree)
✅ Mini summary: FIN, NULL, and XMAS scans use different flags to evade detection.
Definition: The IDLE scan uses a "zombie" host to bounce the scan, hiding the real source.
Why it's important: It makes it almost impossible to trace the scan back to you.
Simple explanation: Like hiding behind a friend so people don't see you.
Real-life example: You throw a pebble to make noise so people look away while you sneak past.
School example: You pass a note through a friend so the teacher doesn't see it's from you.
Home example: You ask your sibling to ask for something so you don't have to.
Nigerian example: Nigerian security researchers use IDLE scans in penetration testing.
Illustration:
IDLE Scan: Your Computer ---> Zombie Host ---> Target Target sees traffic coming from the Zombie, not you.
✅ Mini summary: IDLE scan hides your identity by using a "zombie" host.
Definition: Script scanning uses the Nmap Scripting Engine (NSE) to run scripts that perform advanced tasks.
Why it's important: Scripts can detect vulnerabilities, enumerate services, and much more.
Simple explanation: Scripts are like mini-programs that do specific jobs for you.
Real-life example: A robot that can do different tasks based on the program you load.
School example: A calculator that can do addition, subtraction, and multiplication – each is a "script".
Home example: A recipe book – each recipe is like a script for cooking.
Nigerian example: Nigerian network admins use scripts to check for vulnerabilities in their systems.
Illustration:
Command: nmap --script=http-headers 192.168.1.1 This script will retrieve the HTTP headers of the web server.
✅ Mini summary: Script scanning allows Nmap to perform advanced, automated tasks.
Definition: You can save the results of your scan to a file for later analysis.
Why it's important: You can compare scans over time and create reports.
Simple explanation: Like taking notes so you don't forget what you learned.
Real-life example: A detective writes a report after an investigation.
School example: You take notes in class to study later.
Home example: You write a shopping list so you don't forget items.
Nigerian example: Nigerian network admins save scan results as part of their security audits.
Illustration:
Save in Normal Format: nmap -oN scan.txt 192.168.1.1 Save in XML: nmap -oX scan.xml 192.168.1.1 Save in Grepable: nmap -oG scan.gnmap 192.168.1.1
✅ Mini summary: Saving scan results helps you keep records and analyze them later.
Definition: You can scan a whole range of IP addresses to discover all devices on a network.
Why it's important: It gives you a full picture of what's on the network.
Simple explanation: Like checking every house on a street instead of just one.
Real-life example: A mailman delivers to every house on the street.
School example: A teacher checks attendance for the whole class, not just one student.
Home example: You look for all your toys in the whole room, not just one corner.
Nigerian example: Nigerian ISPs scan their entire network range to monitor devices.
Illustration:
Scan a single IP: nmap 192.168.1.1 Scan a range: nmap 192.168.1.1-50 Scan a subnet: nmap 192.168.1.0/24
✅ Mini summary: Scanning an entire network gives you a complete inventory of devices.
Definition: Performance optimization means adjusting Nmap's settings to scan faster or more efficiently.
Why it's important: On large networks, you may need to speed up scans.
Simple explanation: Like finding a faster route to school.
Real-life example: A delivery company uses GPS to find the fastest route.
School example: You take a shortcut to the cafeteria at lunchtime.
Home example: You use a timer to cook food faster.
Nigerian example: Nigerian network admins optimize scans to monitor large networks without slowing them down.
Illustration:
Options: --min-hostgroup : Minimum hosts to scan together --max-hostgroup : Maximum hosts to scan together --min-rtt-timeout : Minimum time to wait for response --max-rtt-timeout : Maximum time to wait for response
✅ Mini summary: Performance optimization helps you scan large networks faster.
Definition: These are tricks to bypass firewalls that might block standard scans.
Why it's important: Firewalls often block scans, so you need ways to get through.
Simple explanation: Like finding a secret passage when the main door is locked.
Real-life example: A spy uses a hidden entrance to a building.
School example: You find a back door to the library when the front door is locked.
Home example: You climb through a window when the front door is locked.
Nigerian example: Nigerian security professionals use these techniques to test firewall effectiveness.
Illustration:
Fragmentation (-f): Break packets into small pieces. MTU (-mtu): Set a smaller packet size. Decoy (-D): Hide your scan among fake IPs.
✅ Mini summary: Firewall evasion techniques help you scan networks protected by firewalls.
Definition: You have learned many new scanning techniques.
Why it's important: You are now ready to use Nmap like a pro.
Simple explanation: You have added many new tools to your detective kit.
Real-life example: A chef who learns new recipes.
School example: You have learned new subjects in school.
Home example: You have learned new games to play.
Nigerian example: A Nigerian IT professional now has advanced Nmap skills.
Illustration:
In this module, you learned: - SYN, TCP Connect, and UDP scans - OS and version detection - The aggressive scan (-A) - Timing templates - FIN, NULL, and XMAS scans - IDLE scan for stealth - Script scanning (NSE) - Saving results - Scanning networks - Performance optimization - Firewall evasion
✅ Mini summary: You have learned advanced Nmap techniques!
nmap -sS 192.168.1.1nmap -O 192.168.1.1SYN Scan (Stealth): Client: SYN (knock) Server: SYN/ACK (door opens) Client: RST (walks away) TCP Connect Scan (Full): Client: SYN (knock) Server: SYN/ACK (door opens) Client: ACK (enters)
Start
|
V
Need stealth? ---Yes--- Use SYN scan (-sS)
| No
V
Need UDP? ---Yes--- Use UDP scan (-sU)
| No
V
Use TCP Connect (-sT) or aggressive (-A)
| Scan Type | Command | Stealth | Use Case |
|---|---|---|---|
| SYN Scan | -sS | High | Stealth scanning |
| TCP Connect | -sT | Low | Accurate scanning |
| UDP Scan | -sU | Medium | UDP services |
| OS Detection | -O | Medium | Identifying OS |
| Version Detection | -sV | Medium | Service versions |
1997 : Nmap 1.0 1998 : Nmap 2.0 adds OS detection 2000 : Nmap 3.0 adds version detection 2005 : Nmap 4.0 adds NSE scripts 2010 : Nmap 5.0 adds performance improvements 2015 : Nmap 7.0 adds new scripts and features 2024 : Nmap continues to evolve
You have completed Module 2 of the Certified Nmap User course! You have learned about advanced scanning techniques, including SYN scans, UDP scans, OS detection, version detection, and the powerful aggressive scan. You also learned about timing templates, stealth techniques, and script scanning. These skills make you a much more effective network detective.
Remember, with great power comes great responsibility. Always use these techniques ethically and only on networks you own or have permission to scan. Now you are ready to move on to Module 3, where we will dive into the Nmap Scripting Engine (NSE) and learn how to write our own scripts!
Match the term to its definition:
| Term | Definition |
|---|---|
| 1. SYN Scan | A. Stealthy scan |
| 2. TCP Connect | B. Full connection scan |
| 3. UDP Scan | C. Scan for UDP services |
| 4. OS Detection | D. Finds operating system |
| 5. Version Detection | E. Finds service version |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: You are a security analyst at a bank. You need to check for open ports on your network without causing any alarms or disruption. What scan type would you use and why?
Scenario 2: Your school has a new firewall, and you want to test if it's working properly. You want to see if you can detect open ports behind the firewall. What techniques would you use?
In groups of 3-4, set up a small network using virtual machines. Assign roles: one person runs the scans, one person monitors the network, and one person documents the results. Try different scan types and compare the results. Present your findings to the class.
On your home network (with permission), run a SYN scan, a UDP scan, and an aggressive scan on your router. Compare the results. Write a short report on what you found.
Create a network diagram of your school or home network. Use Nmap to scan the network and identify all devices. Mark each device with its IP address, operating system (if detected), and open ports. Present your diagram to the class.
Set up two virtual machines on your computer. Install Nmap on one machine and use it to scan the other. Perform a SYN scan, a UDP scan, and an aggressive scan. Write a report detailing the results and what you learned.
Set up a firewall on a virtual machine and configure it to block certain ports. Use Nmap to identify which ports are blocked and which are open. Try different scanning techniques (SYN, TCP Connect, FIN, NULL) to see which ones can bypass the firewall. Write a detailed report.
Multiple choice answers are provided above. Fill-in-the-blank answers:
In Module 3, we will dive deep into the Nmap Scripting Engine (NSE). You will learn how to use pre-written scripts to detect vulnerabilities, brute-force passwords, and much more. You will also learn the basics of writing your own scripts in Lua. Get ready to unlock the full power of Nmap!
🎉 Congratulations! You have completed Module 2 of the Certified Nmap User course. 🎉
You are now ready to move on to Module 3 – Nmap Scripting Engine (NSE).
Welcome, young network detective! In Modules 1 and 2, we learned how to scan networks, find open ports, detect operating systems, and even use stealth techniques. Now, we are going to unlock the superpower of Nmap – the Nmap Scripting Engine (NSE). NSE is like having a toolbox full of special tools that can do hundreds of different jobs automatically. You can use NSE to check for security problems, find out more about services, and even perform complex attacks (in a safe, legal way). In this module, you will learn how to use pre-made scripts and even write your own simple scripts. Get ready to become a true Certified Nmap User!
By the end of this module, you will be able to:
In Lagos, there was a young IT officer named Tunde. He was responsible for keeping his company's network safe. Every morning, he would run scans to check for problems. But the scans took a long time, and he often missed small details. One day, his boss introduced him to NSE – the Nmap Scripting Engine. She said, "Tunde, this is like having a team of robot assistants. They can do hundreds of jobs for you automatically." Tunde was amazed. He could now run a script to check all web servers for vulnerabilities, another script to enumerate user accounts, and another to brute-force weak passwords. Tunde became the best security officer in the company, all thanks to NSE!
Definition: NSE stands for Nmap Scripting Engine. It is a powerful feature of Nmap that allows you to run scripts to automate tasks.
Why it's important: NSE saves you time and does complex jobs automatically.
Simple explanation: NSE is like having a robot that can do many different jobs for you.
Real-life example: A factory uses robots to assemble cars – NSE does that for network tasks.
School example: A calculator that can do addition, subtraction, and multiplication – each is like a script.
Home example: A kitchen robot that can chop, mix, and cook.
Nigerian example: Nigerian network admins use NSE to automate security checks.
Illustration:
+-------------------+
| NSE |
| (Nmap Scripting |
| Engine) |
+-------------------+
|
V
+-------------------+
| Runs scripts to |
| do various tasks |
+-------------------+
✅ Mini summary: NSE is a powerful engine that runs scripts to automate network tasks.
Definition: NSE scripts are pre-written programs that perform specific network tasks.
Why it's important: They save time and can do things that manual scanning cannot.
Simple explanation: Scripts are like recipes – you follow them to make something.
Real-life example: A chef uses recipes to cook different dishes.
School example: You follow instructions to do a science experiment.
Home example: You follow a craft tutorial to make a project.
Nigerian example: A Nigerian security team uses scripts to check for common vulnerabilities.
Illustration:
Manual scanning: You check each port one by one (slow). Script scanning: You run a script that checks everything (fast).
✅ Mini summary: NSE scripts automate complex tasks, saving you time and effort.
Definition: NSE scripts are organized into categories based on what they do.
Why it's important: Categories help you find the right script for your task.
Simple explanation: Like a library that has sections for different types of books.
Real-life example: A supermarket has aisles for different products.
School example: A school has different classes for different subjects.
Home example: You have separate drawers for different toys.
Nigerian example: Nigerian admins use the "vuln" category to find vulnerabilities.
Illustration:
Common Categories: ------------------ auth : Authentication (checking logins) brute : Brute-force attacks (guessing passwords) default : Default scripts (run by -sC) discovery: Finding information about services dos : Denial of Service (testing for crashes) exploit : Exploiting vulnerabilities fuzzer : Sending random data to find bugs intrusive: May cause some disruption malware : Detecting malware safe : Safe scripts (no disruption) version : Detecting service versions vuln : Vulnerability detection
✅ Mini summary: Scripts are categorized by their purpose, making them easy to find.
Definition: You run a script using the --script flag followed by the script name or category.
Why it's important: This is how you tell Nmap which script to run.
Simple explanation: It's like telling your robot which task to do.
Real-life example: You tell your dog "fetch the ball" – that's a command.
School example: The teacher says "open your books" – that's an instruction.
Home example: You tell your smart speaker to play music.
Nigerian example: A Nigerian admin runs "nmap --script=http-headers" to check web servers.
Illustration:
Command: nmap --script=http-headers 192.168.1.1 This runs the script called "http-headers".
✅ Mini summary: Use --script to tell Nmap which script to run.
Definition: You can run all scripts in a category by using the category name.
Why it's important: It allows you to perform comprehensive checks quickly.
Simple explanation: Like telling your robot to do all cleaning tasks at once.
Real-life example: You tell a worker to clean the entire room, not just one spot.
School example: A teacher says "do all the exercises on page 10".
Home example: You tell your sibling to clean the whole house.
Nigerian example: A Nigerian admin runs "nmap --script=vuln" to check for all vulnerabilities.
Illustration:
Command: nmap --script=vuln 192.168.1.1 This runs all scripts in the "vuln" category.
✅ Mini summary: You can run all scripts in a category for a comprehensive check.
Definition: Script arguments allow you to customize how a script works.
Why it's important: They give you control over the script's behavior.
Simple explanation: Like telling a chef to add extra salt to your meal.
Real-life example: You adjust the temperature on your oven.
School example: You choose which questions to answer on a test.
Home example: You set a timer for cooking.
Nigerian example: A Nigerian admin uses arguments to specify which usernames to try.
Illustration:
Command: nmap --script=http-headers --script-args=http-headers.path=/admin 192.168.1.1 This tells the script to look at the /admin path.
✅ Mini summary: Script arguments let you customize how a script works.
Definition: -sC runs a default set of safe, useful scripts.
Why it's important: It's an easy way to get a lot of useful information.
Simple explanation: Like ordering a combo meal – you get a little bit of everything.
Real-life example: A basic car service that checks the most important things.
School example: A general test that covers all subjects.
Home example: A monthly cleaning that covers all rooms.
Nigerian example: Nigerian admins often start with -sC for routine checks.
Illustration:
Command: nmap -sC 192.168.1.1 This runs the default script set.
✅ Mini summary: -sC runs a useful set of safe default scripts.
Definition: You can use the --script-help flag to get information about a script.
Why it's important: It helps you understand what a script does before running it.
Simple explanation: Like reading the description of a book before reading it.
Real-life example: You read a movie review before watching it.
School example: You read the chapter summary before reading the whole chapter.
Home example: You read the instructions before using a new gadget.
Nigerian example: A Nigerian admin uses --script-help to learn about new scripts.
Illustration:
Command: nmap --script-help http-headers This shows you what the http-headers script does.
✅ Mini summary: Use --script-help to learn about a script before running it.
Definition: Lua is a programming language used to write NSE scripts.
Why it's important: If you want to write your own scripts, you need to know Lua.
Simple explanation: Lua is like the language you use to talk to Nmap.
Real-life example: English is a language we use to talk to each other.
School example: You learn French to speak to people in France.
Home example: You learn sign language to talk to someone who is deaf.
Nigerian example: Nigerian developers learn Lua to write NSE scripts for their companies.
Illustration:
Simple Lua Example:
print("Hello, world!")
This prints "Hello, world!" when run.
✅ Mini summary: Lua is the programming language used to write NSE scripts.
Definition: You can create a custom NSE script by writing Lua code.
Why it's important: Custom scripts can do exactly what you need.
Simple explanation: Like writing your own recipe instead of using someone else's.
Real-life example: An inventor creates a new tool.
School example: You write your own story.
Home example: You design your own garden layout.
Nigerian example: A Nigerian company writes custom scripts for their specific network needs.
Illustration:
Simple Script (hello.nse):
description = "A simple hello script"
action = function(host, port)
return "Hello, network!"
end
Run with: nmap --script=./hello.nse 192.168.1.1
✅ Mini summary: You can write your own NSE scripts using Lua.
Definition: You can run your own scripts by specifying the file path.
Why it's important: It allows you to test and use your custom scripts.
Simple explanation: Like testing a new recipe you created.
Real-life example: A chef tests a new dish.
School example: You test your science experiment.
Home example: You test a new garden tool.
Nigerian example: A Nigerian admin tests custom scripts on test networks first.
Illustration:
Command: nmap --script=./my_script.nse 192.168.1.1 This runs your custom script.
✅ Mini summary: Use --script with the file path to run your custom script.
Definition: Some scripts are particularly useful for new users.
Why it's important: They help you accomplish common tasks easily.
Simple explanation: Like having a few basic tools in your toolbox.
Real-life example: A beginner cook uses basic recipes.
School example: You start with simple math problems.
Home example: You start with simple DIY projects.
Nigerian example: Nigerian beginners use scripts like http-title and ssh-hostkey.
Illustration:
Useful Scripts: -------------- http-title : Shows the title of a web page http-headers: Shows HTTP headers ssh-hostkey: Shows SSH host keys smb-os-discovery: Finds Windows OS version dns-zone-transfer: Tries to do a DNS zone transfer
✅ Mini summary: Many useful scripts help you learn and accomplish tasks.
Definition: Many NSE scripts are designed to detect specific vulnerabilities.
Why it's important: They help you find security problems in your network.
Simple explanation: Like a doctor checking for symptoms of illness.
Real-life example: A mechanic checks a car for problems.
School example: A teacher checks for students who need help.
Home example: You check your plants for signs of disease.
Nigerian example: Nigerian companies use vulnerability scripts to secure their systems.
Illustration:
Command: nmap --script=vuln 192.168.1.1 This checks for many common vulnerabilities.
✅ Mini summary: Vulnerability detection scripts help you find security problems.
Definition: Brute-force scripts try many passwords to guess the correct one.
Why it's important: They help test if passwords are strong enough.
Simple explanation: Like trying many keys to open a lock.
Real-life example: A locksmith tries different keys to open a door.
School example: You try different combinations to open a locker.
Home example: You try different keys to find the right one for a drawer.
Nigerian example: Nigerian security teams use brute-force scripts to test password strength.
Illustration:
Command: nmap --script=mysql-brute 192.168.1.1 This tries to guess MySQL passwords.
✅ Mini summary: Brute-force scripts test password strength by trying many combinations.
Definition: You have learned how to use NSE scripts to automate network tasks.
Why it's important: You can now perform complex scans quickly and easily.
Simple explanation: You have added a powerful new tool to your detective kit.
Real-life example: A chef who has learned to use many new kitchen tools.
School example: You have learned a new subject.
Home example: You have learned a new skill.
Nigerian example: A Nigerian IT pro now has advanced scripting skills.
Illustration:
In this module, you learned: - What NSE is and why it's useful - Script categories - Running scripts and using arguments - The default script set (-sC) - Finding script information - Introduction to Lua - Writing and running custom scripts - Useful scripts for beginners - Vulnerability detection - Brute-force scripts
✅ Mini summary: You have learned how to use NSE scripts to automate and enhance your scans.
nmap --script=http-title 192.168.1.1description = "Hello script"action = function(host, port) return "Hello, world!" endnmap --script=./hello.nse 192.168.1.1
Nmap Command
|
V
+-------------------+
| NSE Engine |
+-------------------+
|
V
+-------------------+
| Load Script |
+-------------------+
|
V
+-------------------+
| Run Script |
+-------------------+
|
V
+-------------------+
| Output Result |
+-------------------+
Start
|
V
Need to check for vulnerabilities? ---Yes--- Use vuln
| No
V
Need to discover services? ---Yes--- Use discovery
| No
V
Need to brute-force passwords? ---Yes--- Use brute
| No
V
Use default scripts (-sC)
| Category | Purpose | Example |
|---|---|---|
| vuln | Find vulnerabilities | http-vuln-* |
| discovery | Discover services | http-title |
| brute | Brute-force passwords | mysql-brute |
| auth | Check authentication | ftp-anon |
| safe | Safe, non-intrusive | ssh-hostkey |
2005 : NSE introduced with Nmap 4.0 2010 : Hundreds of scripts added 2015 : NSE becomes more powerful 2020 : Over 600 scripts available 2024 : NSE continues to grow with new scripts
You have completed Module 3 of the Certified Nmap User course! You have learned about the Nmap Scripting Engine (NSE) – a powerful tool that automates network tasks. You learned about script categories, how to run scripts, and how to customize them with arguments. You were introduced to the Lua programming language and even learned how to write a simple script. You also discovered useful scripts for vulnerability detection, brute-force, and more.
Now you have the skills to use NSE to automate your network scanning tasks. Always remember to use these tools ethically and with permission. Congratulations – you are now a Certified Nmap User!
Match the term to its definition:
| Term | Definition |
|---|---|
| 1. NSE | A. The Nmap Scripting Engine |
| 2. --script | B. Flag to run a script |
| 3. -sC | C. Runs default script set |
| 4. Lua | D. Language for NSE scripts |
| 5. vuln | E. Vulnerability detection category |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: You are a security analyst at a company. You want to check if your web server has any known vulnerabilities. What NSE category would you use, and how would you run it?
Scenario 2: You want to test if your SQL server has weak passwords. What kind of script would you use? What command would you run?
In groups of 3-4, each person chooses a different NSE script category. Research the category, find three scripts in it, and present what they do to the class. Then, set up a test network and demonstrate one of the scripts.
Choose an NSE script from the "discovery" category. Use --script-help to learn about it. Then, run it on a local test machine and document the results. Write a short report on what the script does and what you found.
Write a simple NSE script that prints "Hello, [target IP]" when run. Test it on a local host. Then, modify the script to print the target's hostname as well. Document your process and results.
Set up a virtual network with a web server. Use NSE scripts to check the web server for vulnerabilities. Document each script you used, what it did, and what results you found. Write a summary of the security status of the web server.
Find a vulnerability in a test system using NSE scripts. Then, write a custom NSE script that specifically checks for that vulnerability. Test your script and document the entire process.
Multiple choice answers are provided above. Fill-in-the-blank answers:
You have now completed the Certified Nmap User course! You have learned how to install Nmap, perform basic and advanced scans, and use the Nmap Scripting Engine. You are now equipped with the skills to discover networks, find vulnerabilities, and automate tasks. Your journey as a network detective has just begun. Keep practicing, stay curious, and always use your skills for good.
🎉 Congratulations! You have completed the Certified Nmap User course. 🎉
You are now a Certified Nmap User!
Welcome, young network detective! You have come a long way. In Modules 1, 2, and 3, you learned how to install Nmap, run scans, and even use scripts to automate tasks. Now, in Module 4, we will put everything together. We will learn how to use Nmap in real-world situations. You will discover how to plan a scan, how to interpret results, and how to report your findings. You will also learn how to use Nmap to monitor networks over time. By the end of this module, you will be ready to use Nmap like a true professional. Let's begin!
By the end of this module, you will be able to:
In the bustling city of Lagos, there was a bank called TrustBank. The bank had many branches, ATMs, and online services. The bank's security team was worried. They had heard that hackers were targeting banks in Nigeria. The manager called in a young security expert named Zainab. Zainab was a Certified Nmap User. She said, "I will use Nmap to map your entire network and find any weaknesses."
Zainab planned her scan carefully. She started with a ping scan to find all devices. Then, she used a SYN scan to find open ports. She used OS detection to identify all the different systems. She even used NSE scripts to check for vulnerabilities. After the scan, she wrote a clear report. The bank fixed the issues she found and became much safer. The manager was very happy and said, "Thank you, Zainab! You are a true professional."
Definition: Planning a scan means deciding what to scan, how to scan, and when to scan.
Why it's important: Good planning saves time and gives better results.
Simple explanation: Like planning a journey – you need to know your destination and the best route.
Real-life example: A pilot plans a flight route before takeoff.
School example: You plan your study schedule before exams.
Home example: You plan your chores for the weekend.
Nigerian example: A Nigerian network admin plans scans during off-peak hours to avoid disruption.
Illustration:
Scan Planning Steps: -------------------- 1. Define the goal (What do you want to find?) 2. Identify the target (Which IPs or range?) 3. Choose the scan type (SYN, TCP Connect, UDP?) 4. Decide timing (Slow/stealthy or fast?) 5. Schedule the scan (During low-traffic hours?)
✅ Mini summary: Planning your scan helps you get the best results with minimum disruption.
Definition: Interpreting results means understanding what the scan output tells you.
Why it's important: You need to know what the results mean to take action.
Simple explanation: Like reading a doctor's report to understand your health.
Real-life example: A mechanic reads a diagnostic report to fix a car.
School example: You read your test results to see what you need to study more.
Home example: You read the weather report to plan your day.
Nigerian example: A Nigerian admin sees an open port and knows it could be a security risk.
Illustration:
Scan Result Example: -------------------- PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 443/tcp open https Interpretation: - Port 22 is open (SSH – remote access) - Port 80 is open (HTTP – web traffic) - Port 443 is open (HTTPS – secure web traffic)
✅ Mini summary: Interpreting results helps you understand what the scan has discovered.
Definition: A security report is a document that summarizes your findings and recommends actions.
Why it's important: It helps others understand what you found and what to do.
Simple explanation: Like writing a book report for your teacher.
Real-life example: A detective writes a report after an investigation.
School example: You write a science report after an experiment.
Home example: You write a list of repairs needed for your house.
Nigerian example: A Nigerian security consultant delivers a report to a bank's board.
Illustration:
Report Structure: ----------------- 1. Executive Summary (What you found) 2. Methodology (How you scanned) 3. Findings (What was discovered) 4. Risk Assessment (How serious are the issues?) 5. Recommendations (What to do) 6. Appendix (Raw data)
✅ Mini summary: A security report communicates your findings clearly to others.
Definition: Monitoring means running scans regularly to watch for changes.
Why it's important: Networks change – new devices are added, old ones are removed.
Simple explanation: Like checking your garden every day to see what's growing.
Real-life example: A security guard does regular patrols.
School example: A teacher takes attendance every day.
Home example: You check your room for clutter every evening.
Nigerian example: A Nigerian company runs weekly scans to monitor their network.
Illustration:
Monitoring Schedule: -------------------- Daily: Quick ping scan to check for new devices Weekly: Full port scan Monthly: Vulnerability scan with NSE scripts Quarterly: Comprehensive audit with all features
✅ Mini summary: Regular monitoring helps you detect changes and problems early.
Definition: Combining tools means using Nmap alongside other security tools.
Why it's important: Different tools have different strengths – together they are more powerful.
Simple explanation: Like using a hammer and a screwdriver for different tasks.
Real-life example: A chef uses multiple kitchen tools.
School example: You use a pen, ruler, and compass for drawing.
Home example: You use a broom, mop, and vacuum for cleaning.
Nigerian example: Nigerian security teams use Nmap with Metasploit and Wireshark.
Illustration:
Nmap + Other Tools: ------------------- Nmap : Network discovery Wireshark : Packet analysis Metasploit : Exploitation Nikto : Web server scanning Nessus : Vulnerability scanning
✅ Mini summary: Combining Nmap with other tools gives you a complete security picture.
Definition: Documentation means keeping records of what you did and what you found.
Why it's important: It helps you remember what you did and proves your work.
Simple explanation: Like keeping a diary of your activities.
Real-life example: A scientist keeps a lab notebook.
School example: You take notes in class.
Home example: You keep a list of books you've read.
Nigerian example: A Nigerian admin keeps logs of all scans performed.
Illustration:
What to Document: ----------------- - Date and time of scan - Target IPs or range - Commands used - Results found - Actions taken - Recommendations
✅ Mini summary: Documentation helps you track your work and share it with others.
Definition: Large networks have many devices – you need special techniques to scan them.
Why it's important: Scanning a large network can take a long time and use many resources.
Simple explanation: Like cleaning a huge house – you need a plan and the right tools.
Real-life example: A city's traffic management system monitors many roads.
School example: A school with many students needs a good attendance system.
Home example: A large garden needs a watering schedule.
Nigerian example: Nigerian ISPs scan large networks with many customers.
Illustration:
Large Network Techniques: ------------------------- - Use timing templates (T3 or T4) - Use host groups (--min-hostgroup) - Scan only necessary ports - Use version detection selectively - Schedule scans during off-peak hours
✅ Mini summary: Special techniques help you scan large networks efficiently.
Definition: Cloud environments are networks hosted by providers like AWS, Azure, or Google Cloud.
Why it's important: Many companies use cloud services, and they need security too.
Simple explanation: Like checking a house that's not on the ground but in the sky.
Real-life example: Checking a server that's in a data center far away.
School example: Checking a school that's online only.
Home example: Checking a virtual gaming server.
Nigerian example: Nigerian companies using AWS or Azure need cloud security.
Illustration:
Cloud Scanning Considerations: ------------------------------ - Get permission from the cloud provider - Use correct IP ranges - Be aware of firewall rules - Use version detection carefully - Consider using cloud-specific tools
✅ Mini summary: Scanning cloud environments requires special considerations.
Definition: Internet-facing systems are devices that are visible from the internet.
Why it's important: These are the most likely targets for attackers.
Simple explanation: Like checking the front door of your house – it's the most obvious entrance.
Real-life example: A bank's website is internet-facing.
School example: A school's public website.
Home example: Your home router is internet-facing.
Nigerian example: Nigerian e-commerce sites are internet-facing.
Illustration:
Scanning Internet-Facing Systems: --------------------------------- - Use stealthy scans (SYN scan) - Use timing templates (T2 or T3) - Use NSE scripts for web vulnerabilities - Be careful – some scans may be considered illegal - Always get permission
✅ Mini summary: Internet-facing systems need careful scanning with permission.
Definition: Firewalls and IDS (Intrusion Detection Systems) are security devices that may block your scans.
Why it's important: You need to know how to scan without being blocked.
Simple explanation: Like finding a way past a guard without being seen.
Real-life example: A spy uses secret passages to avoid guards.
School example: You find a quiet place to study where no one disturbs you.
Home example: You find a secret hiding spot for your treasure.
Nigerian example: Nigerian admins use fragmentation and decoys to get past firewalls.
Illustration:
Firewall Evasion Techniques: ---------------------------- - Fragmentation (-f) - MTU adjustment (-mtu) - IP decoys (-D) - Source port spoofing - MAC address spoofing - Using timing templates (slow)
✅ Mini summary: Firewall evasion techniques help you scan without being blocked.
Definition: Incident response is when you react to a security breach.
Why it's important: You need to quickly find out what's happening.
Simple explanation: Like rushing to put out a fire.
Real-life example: A fire department responds to a fire.
School example: A teacher responds to a student emergency.
Home example: You respond to a broken window.
Nigerian example: A Nigerian company uses Nmap to find a hacker's entry point.
Illustration:
Nmap in Incident Response: -------------------------- - Quick scan to find all devices - Find open ports that shouldn't be open - Detect unusual operating systems - Use NSE scripts to check for known malware - Document everything for evidence
✅ Mini summary: Nmap helps you quickly investigate a security incident.
Definition: There are laws about scanning networks – you must follow them.
Why it's important: Scanning without permission can get you in trouble.
Simple explanation: Like not entering someone's house without permission.
Real-life example: In many countries, unauthorized scanning is illegal.
School example: You can't look at another student's test without permission.
Home example: You can't open your sibling's mail without permission.
Nigerian example: In Nigeria, unauthorized scanning is illegal.
Illustration:
Legal Scanning: --------------- - Only scan networks you own - Get written permission for others - Follow company policies - Be aware of local laws - Keep records of permissions
✅ Mini summary: Always scan legally and with permission.
Definition: Penetration testing (pentesting) is when you simulate an attack to find weaknesses.
Why it's important: It helps organizations fix problems before real attackers find them.
Simple explanation: Like practicing a fire drill to be ready for a real fire.
Real-life example: A security company tests a bank's security.
School example: Students practice for a safety drill.
Home example: You test your home security system.
Nigerian example: Nigerian companies hire pentesters to test their security.
Illustration:
Pentesting with Nmap: --------------------- 1. Reconnaissance (Find targets) 2. Scanning (Find open ports) 3. Enumeration (Find services) 4. Vulnerability discovery (Use NSE) 5. Reporting (Document findings)
✅ Mini summary: Nmap is a key tool in penetration testing.
Definition: Automation means having Nmap run scans automatically without human intervention.
Why it's important: It saves time and ensures regular scanning.
Simple explanation: Like having a robot vacuum that cleans while you sleep.
Real-life example: A factory uses robots to make products.
School example: A school uses automatic bells to signal class changes.
Home example: You set a timer to water your plants.
Nigerian example: Nigerian companies use cron jobs to run Nmap scans automatically.
Illustration:
Automation Example: ------------------- Cron job (Linux): 0 2 * * * nmap -sn 192.168.1.0/24 -oN /logs/pingscan_$(date).txt This runs a ping scan every day at 2 AM and saves the results.
✅ Mini summary: Automation ensures regular scans without manual effort.
Definition: You have learned how to use Nmap in real-world situations.
Why it's important: You can now apply your skills to practical projects.
Simple explanation: You have learned how to use your tools in real life.
Real-life example: A pilot who now knows how to fly in different weather.
School example: You have learned a new subject and can use it.
Home example: You have learned a new recipe and can cook it.
Nigerian example: A Nigerian IT pro now has practical Nmap skills.
Illustration:
In this module, you learned: - Planning a scan - Interpreting results - Creating reports - Monitoring networks - Combining tools - Documenting work - Handling large networks - Scanning cloud environments - Dealing with firewalls - Incident response - Legal considerations - Penetration testing - Automation
✅ Mini summary: You are now ready to apply your Nmap skills in the real world.
+-------------------+
| Plan Scan |
+-------------------+
|
V
+-------------------+
| Run Scan |
+-------------------+
|
V
+-------------------+
| Interpret |
+-------------------+
|
V
+-------------------+
| Create Report |
+-------------------+
Incident Detected
|
V
+-------------------+
| Quick Scan |
| to find devices |
+-------------------+
|
V
+-------------------+
| Identify |
| suspicious |
| activity |
+-------------------+
|
V
+-------------------+
| Take Action |
+-------------------+
| Use Case | Recommended Scan | Reason |
|---|---|---|
| Quick check | Ping scan (-sn) | Fast and low impact |
| Stealth | SYN scan (-sS) | Less detectable |
| Comprehensive | Aggressive (-A) | Gets all information |
| UDP services | UDP scan (-sU) | Finds UDP ports |
| Vulnerability check | NSE vuln scripts | Finds weaknesses |
Phase 1: Reconnaissance (Find targets) Phase 2: Scanning (Nmap - find open ports) Phase 3: Enumeration (Find services) Phase 4: Vulnerability Discovery (NSE scripts) Phase 5: Exploitation (Metasploit) Phase 6: Reporting (Document findings)
You have completed Module 4 of the Certified Nmap User course! You have learned how to plan scans, interpret results, create reports, and monitor networks. You also learned about legal considerations, incident response, and penetration testing. You now have practical skills that can be used in real-world situations. You have completed the entire Certified Nmap User course! Congratulations – you are now a Certified Nmap User!
Match the term to its definition:
| Term | Definition |
|---|---|
| 1. Planning | A. Deciding what to do |
| 2. Interpreting | B. Understanding results |
| 3. Report | C. Document summarizing findings |
| 4. Monitoring | D. Watching over time |
| 5. Documentation | E. Keeping records |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: You are the security analyst at a company. The CEO asks you to check if there are any unauthorized devices on the network. How would you plan your scan? What type of scan would you use?
Scenario 2: You have completed a scan and found an open port that shouldn't be open. What would you include in your report? What recommendations would you make?
In groups of 3-4, plan a network audit for a mock company. Decide on the scope, scan types, and schedule. Create a sample report and present it to the class.
Perform a scan on your home network (with permission). Document your plan, the commands you used, the results, and your interpretation. Write a simple report.
Design a network monitoring plan for a small business. Include what to scan, how often, and what tools to use. Create a sample report based on a hypothetical scan.
Set up a virtual lab with multiple virtual machines. Perform a comprehensive scan, including OS detection, version detection, and NSE scripts. Write a detailed report on your findings.
Simulate a security incident where a hacker has compromised a network. Use Nmap to find the hacker's entry point. Document your investigation and findings.
Multiple choice answers are provided above. Fill-in-the-blank answers:
You have now completed the Certified Nmap User course. You have learned everything you need to know to use Nmap effectively. Your journey as a network detective has just begun. Keep practicing, stay curious, and always use your skills for good. Remember, the world of cybersecurity needs responsible professionals like you.
🎉 Congratulations! You have completed the Certified Nmap User course. 🎉
You are now a Certified Nmap User!
Welcome to the final module, young network detective! You have learned so much about Nmap – from basic scans to scripting and real-world applications. Now, in Module 5, we will explore some advanced techniques that will make you an even more powerful Nmap user. We will also put everything together in a final project where you will plan, execute, and report on a complete network security assessment. This module will prepare you to use Nmap like a true professional. Let's take your skills to the next level!
By the end of this module, you will be able to:
Zainab had become a trusted security expert. She was now working with a big company that had networks all over Nigeria. They needed a complete security check. Zainab knew she had to use all her Nmap skills. She used IPv6 scanning to check the new network devices. She used proxies to scan from different locations. She even scanned the company's industrial control systems to make sure they were safe. She wrote a detailed report that impressed the company's board. They gave her a big promotion. Zainab was proud of all she had learned. Now, it's your turn to complete your final mission!
Definition: IPv6 is the latest version of the Internet Protocol. It has longer addresses than IPv4.
Why it's important: More and more networks are using IPv6. You need to know how to scan it.
Simple explanation: IPv6 is like a new street address system with more numbers and letters.
Real-life example: Your new smartphone uses an IPv6 address.
School example: A school network that uses IPv6 for its new computers.
Home example: Your new smart TV might have an IPv6 address.
Nigerian example: Nigerian ISPs are adopting IPv6.
Illustration:
IPv4: 192.168.1.1 (4 numbers) IPv6: 2001:0db8:85a3:0000:0000:8a2e:0370:7334 (8 groups)
✅ Mini summary: IPv6 scanning is important for modern networks.
Definition: A proxy is an intermediary that forwards your traffic, hiding your real IP.
Why it's important: Proxies let you scan from different locations and hide your identity.
Simple explanation: Like sending a letter through a friend so it looks like it came from them.
Real-life example: Using a VPN to browse the internet safely.
School example: Using a school proxy to access educational websites.
Home example: Using a proxy to protect your privacy online.
Nigerian example: Nigerian companies use proxies for secure scanning.
Illustration:
Your Computer --> Proxy --> Target Target sees the proxy's IP, not yours.
✅ Mini summary: Proxies hide your identity and location when scanning.
Definition: A VPN (Virtual Private Network) creates a secure tunnel for your traffic.
Why it's important: VPNs provide privacy and can help you scan remote networks.
Simple explanation: Like a secret tunnel that only you can use.
Real-life example: You use a VPN to watch shows from another country.
School example: A school uses a VPN to connect different campuses.
Home example: You use a VPN to protect your online activities.
Nigerian example: Nigerian remote workers use VPNs to connect to company networks.
Illustration:
Your Computer ---> VPN ---> Target All traffic is encrypted and hidden.
✅ Mini summary: VPNs provide secure and private connections for scanning.
Definition: Advanced techniques to bypass even the most strict firewalls.
Why it's important: Some networks have strong firewalls that block normal scans.
Simple explanation: Like finding a hidden door when the front door is locked.
Real-life example: A spy uses many tricks to get past security.
School example: You find a secret entrance to the school library.
Home example: You know how to open a stuck window.
Nigerian example: Nigerian security teams use advanced techniques to test their own firewalls.
Illustration:
Techniques: ----------- - Fragmentation (-f) - MTU adjustment (-mtu) - IP decoys (-D) - Source port spoofing - MAC address spoofing - Slow timing (T0-T2) - Randomizing targets
✅ Mini summary: Advanced evasion techniques help you get past strong firewalls.
Definition: ICS/SCADA are systems that control industrial processes like power plants and factories.
Why it's important: These systems are critical and need to be secure.
Simple explanation: Like checking the controls of a big machine.
Real-life example: A power company checks its control systems.
School example: A school checks its heating and cooling system.
Home example: You check your home's electrical panel.
Nigerian example: Nigerian oil and gas companies scan their control systems.
Illustration:
ICS/SCADA Devices: ------------------ - PLCs (Programmable Logic Controllers) - RTUs (Remote Terminal Units) - HMIs (Human-Machine Interfaces) Use Nmap to find these devices and check their security.
✅ Mini summary: ICS/SCADA scanning is important for industrial security.
Definition: Nmap can save results in different formats for different purposes.
Why it's important: Different tools and people need different formats.
Simple explanation: Like saving a document as a PDF, Word file, or text file.
Real-life example: You save a report as PDF to share it.
School example: You save your project as a Word document.
Home example: You save a shopping list as a text file.
Nigerian example: Nigerian admins use XML format to import results into other tools.
Illustration:
Formats: -------- - Normal (-oN): Human-readable text - XML (-oX): For tools and parsing - Grepable (-oG): For grep and scripting - All (-oA): Saves all formats
✅ Mini summary: Different output formats help you share and process results.
Definition: Parsing means extracting specific information from the results.
Why it's important: You often need only specific data from a large scan.
Simple explanation: Like finding a specific word in a big book.
Real-life example: A detective looks for specific clues in evidence.
School example: You search for a specific fact in a textbook.
Home example: You look for a specific item in a messy room.
Nigerian example: A Nigerian admin uses grep to find open SSH ports.
Illustration:
Example: Extract all open ports from XML output. Use Python, grep, or other tools to parse.
✅ Mini summary: Parsing helps you extract the information you need from scan results.
Definition: Scanning systems that are on the public internet.
Why it's important: Many companies have internet-facing systems that need checking.
Simple explanation: Like checking the front door of a house from the street.
Real-life example: A website's public IP address.
School example: A school's public website.
Home example: Your home router's public IP.
Nigerian example: Nigerian e-commerce sites need regular internet scanning.
Illustration:
Your Computer ---> Internet ---> Target IP Be careful: Always get permission!
✅ Mini summary: Internet scanning must be done carefully and with permission.
Definition: Python is a programming language that can control Nmap.
Why it's important: It allows you to automate complex scanning workflows.
Simple explanation: Like writing a program that tells Nmap what to do.
Real-life example: A script that scans a network every hour.
School example: A program that checks all school computers.
Home example: A script that monitors your home network.
Nigerian example: Nigerian developers use Python to automate Nmap scans.
Illustration:
Example Python code:
import nmap
nm = nmap.PortScanner()
nm.scan('192.168.1.1', '22-443')
✅ Mini summary: Python allows you to automate and extend Nmap's capabilities.
Definition: Metasploit is a penetration testing framework. Nmap results can be imported into it.
Why it's important: It allows you to use scan results for further testing.
Simple explanation: Like using a map to plan a treasure hunt.
Real-life example: A security team uses Nmap results to plan an attack simulation.
School example: You use research to plan a science project.
Home example: You use a grocery list to plan your shopping.
Nigerian example: Nigerian pentesters use Nmap with Metasploit for assessments.
Illustration:
Nmap Scan --> Save as XML --> Import into Metasploit Metasploit uses the results for exploitation.
✅ Mini summary: Integrating Nmap with Metasploit streamlines penetration testing.
Definition: Wireshark is a tool for analyzing network traffic.
Why it's important: You can use Wireshark to see exactly what Nmap is doing.
Simple explanation: Like watching a movie to understand a story better.
Real-life example: A mechanic uses a diagnostic tool to see what's happening in a car.
School example: You use a microscope to see tiny details.
Home example: You use a magnifying glass to see small print.
Nigerian example: Nigerian admins use Wireshark to debug Nmap scans.
Illustration:
Nmap sends packets --> Wireshark captures them You can see every packet in detail.
✅ Mini summary: Wireshark helps you understand how Nmap works by analyzing traffic.
Definition: A complete security assessment includes planning, scanning, analysis, and reporting.
Why it's important: It provides a full picture of a network's security.
Simple explanation: Like a full health check-up for a network.
Real-life example: A company hires a security team for a full audit.
School example: A school does a full inspection of its facilities.
Home example: You do a full cleaning of your house.
Nigerian example: Nigerian companies conduct regular security assessments.
Illustration:
Steps: ------ 1. Planning 2. Host discovery 3. Port scanning 4. Version detection 5. OS detection 6. Vulnerability scanning (NSE) 7. Analysis 8. Reporting
✅ Mini summary: A complete security assessment gives a full picture of network security.
Definition: A professional report is detailed, clear, and includes recommendations.
Why it's important: It communicates findings to non-technical people.
Simple explanation: Like writing a story that everyone can understand.
Real-life example: A doctor writes a report for a patient.
School example: You write a book report for your class.
Home example: You write a report on your garden's progress.
Nigerian example: Nigerian consultants deliver professional reports to clients.
Illustration:
Professional Report Structure: ------------------------------ 1. Executive Summary 2. Introduction 3. Methodology 4. Findings 5. Risk Assessment 6. Recommendations 7. Conclusion 8. Appendix (raw data)
✅ Mini summary: A professional report communicates your findings clearly and effectively.
Definition: You have learned advanced Nmap techniques and how to conduct a full assessment.
Why it's important: You are now ready for professional work.
Simple explanation: You have completed your training and are ready for real missions.
Real-life example: A pilot completes advanced training.
School example: You graduate from a training program.
Home example: You finish building a model airplane.
Nigerian example: A Nigerian security pro is now fully certified.
Illustration:
In this module, you learned: - IPv6 scanning - Proxies and VPNs - Advanced firewall evasion - ICS/SCADA scanning - Output formats - Parsing results - Internet scanning - Python integration - Metasploit integration - Wireshark integration - Complete assessment - Professional reporting
✅ Mini summary: You have mastered advanced Nmap techniques.
Definition: You have completed the Certified Nmap User course.
Why it's important: You now have valuable skills for cybersecurity.
Simple explanation: You have graduated from Nmap school!
Real-life example: A student graduates from university.
School example: You finish the school year.
Home example: You complete a big project.
Nigerian example: You become a certified cybersecurity professional.
Illustration:
What you have learned: ---------------------- Module 1: Basics of Nmap Module 2: Advanced scanning Module 3: NSE scripts Module 4: Real-world Nmap Module 5: Advanced techniques & final project
✅ Mini summary: You have completed the entire Certified Nmap User course!
nmap -6 [IPv6 address]nmap --proxies socks5://127.0.0.1:1080 targetnmap -oX scan.xml targetIPv6 Address: 2001:0db8:85a3:0000:0000:8a2e:0370:7334 +-------+-------+-------+-------+-------+-------+-------+-------+ | 2001 | 0db8 | 85a3 | 0000 | 0000 | 8a2e | 0370 | 7334 | +-------+-------+-------+-------+-------+-------+-------+-------+
Start
|
V
Planning
|
V
Host Discovery
|
V
Port Scanning
|
V
Version Detection
|
V
OS Detection
|
V
Vulnerability Scanning (NSE)
|
V
Analysis
|
V
Reporting
|
V
End
| Feature | IPv4 | IPv6 |
|---|---|---|
| Address length | 32 bits (4 numbers) | 128 bits (8 groups) |
| Number of addresses | 4.3 billion | 340 undecillion |
| Examples | 192.168.1.1 | 2001:0db8:85a3::8a2e:0370:7334 |
| Nmap flag | Default | -6 |
Week 1: Planning and reconnaissance Week 2: Scanning (host discovery, ports) Week 3: Version and OS detection Week 4: Vulnerability scanning (NSE) Week 5: Analysis and report writing
You have completed Module 5 – the final module of the Certified Nmap User course. You have learned advanced techniques like IPv6 scanning, proxy usage, and ICS/SCADA scanning. You also learned how to parse results and use Nmap with other tools. You now have the knowledge to conduct a complete network security assessment and create professional reports. You have become a true Certified Nmap User!
Match the term to its definition:
| Term | Definition |
|---|---|
| 1. IPv6 | A. Latest version of Internet Protocol |
| 2. Proxy | B. Hides your real IP |
| 3. VPN | C. Secure tunnel for traffic |
| 4. ICS | D. Industrial control systems |
| 5. Metasploit | E. Penetration testing framework |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: You are a security consultant for a power company. They need a full security assessment of their control systems. How would you plan and execute this assessment?
Scenario 2: You are scanning a network that is protected by a very strong firewall. You need to get through without being detected. What techniques would you use?
In groups of 3-4, plan a complete security assessment for a mock company. Assign roles (project manager, scanner, analyst, reporter). Present your plan and a sample report.
Conduct a complete security assessment on a virtual lab network. Perform host discovery, port scanning, version detection, OS detection, and vulnerability scanning. Write a professional report.
Create a complete security assessment for a fictional company called "Naija Tech". Include planning, scans, analysis, and a professional report.
Set up a virtual lab with at least 3 machines. Perform a complete security assessment using all the techniques you have learned. Submit a detailed report with recommendations.
Simulate a penetration test on a target system. Use Nmap to find vulnerabilities, then use Metasploit to exploit them. Document the entire process.
Multiple choice answers are provided above. Fill-in-the-blank answers:
You have now completed the Certified Nmap User course. You are ready to continue your journey in cybersecurity. Consider learning more about other tools like Metasploit, Wireshark, or Python for automation. The world of cybersecurity is vast and exciting. Keep learning, keep practicing, and always use your skills for good!
🎉 Congratulations! You have completed the Certified Nmap User course. 🎉
You are now a Certified Nmap User!
Welcome, young network detective! You have already learned so much about Nmap – from basic scans to advanced techniques. Now, in Module 6, we will explore how Nmap is used in the cloud and how to automate your scanning tasks. More and more companies are using cloud services like AWS, Azure, and Google Cloud. You need to know how to scan these environments safely and effectively. You will also learn how to make Nmap do its work automatically, saving you time and effort. Let's dive into the world of cloud scanning and automation!
By the end of this module, you will be able to:
In Lagos, a fast-growing company called CloudTech moved all its servers to the cloud. They used Amazon Web Services (AWS). The security team needed to make sure everything was safe. They couldn't physically visit the servers – they were in data centers far away. So, they used Nmap to scan their cloud resources. But scanning in the cloud was different. They had to be careful not to disrupt other services. They also used automation to run scans every day. This helped them catch security problems quickly. The company became one of the most secure in Nigeria, all thanks to Nmap and automation!
Definition: Cloud computing means using remote servers on the internet to store, manage, and process data.
Why it's important: Many companies use the cloud instead of owning physical servers.
Simple explanation: Like renting a storage unit instead of building a garage.
Real-life example: Using Google Drive to store your photos.
School example: A school using an online portal for assignments.
Home example: You use a cloud service to back up your phone.
Nigerian example: Nigerian companies use AWS, Azure, or Google Cloud.
Illustration:
+-------------------+
| Your Computer |
+-------------------+
|
V
+-------------------+
| Cloud (Internet)|
| AWS, Azure, GCP |
+-------------------+
✅ Mini summary: Cloud computing is using remote servers over the internet.
Definition: Cloud environments have unique features that change how you scan.
Why it's important: You need to know these differences to scan effectively.
Simple explanation: Like having different tools for building a house vs. a skyscraper.
Real-life example: A car and a truck are both vehicles but have different uses.
School example: You have different classes for different subjects.
Home example: You use different cleaning tools for different rooms.
Nigerian example: Nigerian cloud admins must understand these differences.
Illustration:
Differences: ------------ - Resources are virtual (not physical) - IP addresses change often - Firewalls are software-based - You need cloud provider permission - Scanning may trigger security alerts
✅ Mini summary: Cloud scanning requires understanding of virtual environments.
Definition: AWS (Amazon Web Services) is the most popular cloud platform.
Why it's important: Many Nigerian companies use AWS.
Simple explanation: Like learning to use a specific tool in a workshop.
Real-life example: A company uses AWS for its website.
School example: A school uses AWS for its online learning platform.
Home example: You use AWS to host a gaming server.
Nigerian example: Nigerian startups often use AWS.
Illustration:
AWS Scanning Tips: ------------------ - Use EC2 instance public IPs - Check security groups (firewall rules) - Use IAM roles for permissions - Scan only your own resources - Use CloudWatch to monitor
✅ Mini summary: AWS scanning requires understanding of EC2, security groups, and IAM.
Definition: Azure is Microsoft's cloud platform.
Why it's important: Many companies also use Azure.
Simple explanation: Like learning to use a different brand of tool.
Real-life example: A company uses Azure for its business apps.
School example: A school uses Microsoft Teams for classes.
Home example: You use Azure for a personal project.
Nigerian example: Nigerian companies often use Azure for enterprise solutions.
Illustration:
Azure Scanning Tips: -------------------- - Use Virtual Machine public IPs - Check Network Security Groups (NSG) - Use Azure Active Directory for permissions - Scan only your resources - Use Azure Monitor for alerts
✅ Mini summary: Azure scanning is similar to AWS but with different terminology.
Definition: Google Cloud Platform (GCP) is Google's cloud service.
Why it's important: Some companies use GCP.
Simple explanation: Like learning to use yet another tool.
Real-life example: A startup uses GCP for its app.
School example: A school uses Google Classroom.
Home example: You use GCP for a hobby project.
Nigerian example: Some Nigerian tech companies use GCP.
Illustration:
GCP Scanning Tips: ------------------ - Use Compute Engine public IPs - Check firewall rules - Use IAM for permissions - Scan only your own instances - Use Stackdriver for monitoring
✅ Mini summary: GCP scanning has its own terminology and tools.
Definition: Cloud providers may block your scans if they detect unusual activity.
Why it's important: You need to scan without being blocked.
Simple explanation: Like not being too loud in a library.
Real-life example: You can't run in a hospital.
School example: You can't shout in the classroom.
Home example: You can't play loud music late at night.
Nigerian example: Nigerian admins must follow cloud provider rules.
Illustration:
Avoid Blocks: ------------- - Use slow timing (T2 or T3) - Use SYN scan (less intrusive) - Limit concurrent hosts - Scan during off-peak hours - Get proper permissions
✅ Mini summary: Follow cloud provider rules to avoid being blocked.
Definition: Automation means making tasks run without human help.
Why it's important: It saves time and ensures consistency.
Simple explanation: Like having a robot do your chores.
Real-life example: A factory uses robots to build cars.
School example: A teacher uses a computer to grade tests.
Home example: You use a timer to water your plants.
Nigerian example: Nigerian companies automate security scans.
Illustration:
Manual: You do everything yourself. Automated: A program does it for you.
✅ Mini summary: Automation makes tasks run automatically.
Definition: Cron is a tool that runs commands on a schedule in Linux.
Why it's important: It's a simple way to automate Nmap scans.
Simple explanation: Like setting an alarm clock for a task.
Real-life example: You set a reminder on your phone.
School example: You have a fixed schedule for classes.
Home example: You have a routine for chores.
Nigerian example: Nigerian admins use cron for scheduled scans.
Illustration:
Cron Example: ------------ 0 2 * * * nmap -sn 192.168.1.0/24 > /logs/ping.txt This runs a ping scan every day at 2 AM.
✅ Mini summary: Cron schedules Nmap scans to run automatically.
Definition: A Bash script is a file with commands that run in order.
Why it's important: Scripts can run multiple Nmap commands and process results.
Simple explanation: Like a recipe that tells you how to cook a meal.
Real-life example: A chef follows a recipe to cook.
School example: You follow instructions for a science experiment.
Home example: You follow a DIY guide to build something.
Nigerian example: Nigerian admins write Bash scripts for complex scans.
Illustration:
Bash Script Example: -------------------- #!/bin/bash nmap -sn 192.168.1.0/24 nmap -sV 192.168.1.1 echo "Scan complete!"
✅ Mini summary: Bash scripts automate multiple Nmap tasks.
Definition: Python is a programming language that can control Nmap.
Why it's important: Python offers more advanced automation capabilities.
Simple explanation: Like writing a program that gives instructions to Nmap.
Real-life example: A programmer writes code to automate a task.
School example: You use a computer to solve math problems.
Home example: You program a smart light to turn on at sunset.
Nigerian example: Nigerian developers use Python for Nmap automation.
Illustration:
Python Example:
---------------
import nmap
nm = nmap.PortScanner()
nm.scan('192.168.1.1', '22-443')
for host in nm.all_hosts():
print(host, nm[host].state())
✅ Mini summary: Python provides advanced automation for Nmap.
Definition: Ansible is a tool that automates IT tasks across multiple servers.
Why it's important: It can run Nmap on many machines at once.
Simple explanation: Like having a team of robots that you control.
Real-life example: A manager directs a team of workers.
School example: A teacher guides a whole class.
Home example: You manage multiple smart devices.
Nigerian example: Nigerian companies use Ansible for cloud automation.
Illustration:
Ansible Example:
----------------
- name: Scan network with Nmap
command: nmap -sn 192.168.1.0/24
register: result
✅ Mini summary: Ansible automates Nmap across many servers.
Definition: Continuous monitoring means scanning regularly and automatically.
Why it's important: Networks change constantly – you need to keep watching.
Simple explanation: Like checking your security cameras all the time.
Real-life example: A security guard watches monitors.
School example: A teacher monitors students.
Home example: You check your door locks every night.
Nigerian example: Nigerian companies monitor their networks 24/7.
Illustration:
Continuous Monitoring: ---------------------- Daily: Ping scan Weekly: Port scan Monthly: Vulnerability scan Quarterly: Full assessment
✅ Mini summary: Continuous monitoring keeps networks secure over time.
Definition: Cloud security tools like AWS Inspector or Azure Security Center can work with Nmap.
Why it's important: They provide extra protection and insights.
Simple explanation: Like having multiple security guards working together.
Real-life example: A building has both cameras and guards.
School example: A school has teachers and monitors.
Home example: You have both locks and lights.
Nigerian example: Nigerian companies use Nmap with cloud security tools.
Illustration:
Integration: ------------ Nmap --> AWS Inspector Nmap --> Azure Security Center Nmap --> GCP Security Command Center
✅ Mini summary: Nmap works with cloud security tools for better protection.
Definition: You have learned how to use Nmap in the cloud and automate scans.
Why it's important: These are essential skills for modern cybersecurity.
Simple explanation: You have learned advanced skills for modern networks.
Real-life example: A pilot learns to fly in different weather.
School example: You have learned a new subject.
Home example: You have learned a new hobby.
Nigerian example: A Nigerian IT pro now has cloud and automation skills.
Illustration:
In this module, you learned: - Cloud computing basics - AWS, Azure, GCP scanning - Avoiding cloud provider blocks - Automation with cron, Bash, Python, Ansible - Continuous monitoring - Integration with cloud security tools
✅ Mini summary: You have mastered cloud scanning and automation.
Definition: You have completed the entire Certified Nmap User course!
Why it's important: You now have valuable skills for cybersecurity.
Simple explanation: You have graduated from the Nmap Academy!
Real-life example: A student graduates from school.
School example: You finish the school year.
Home example: You complete a big project.
Nigerian example: You become a certified cybersecurity professional.
Illustration:
What you have learned: ---------------------- Module 1: Basics of Nmap Module 2: Advanced scanning Module 3: NSE scripts Module 4: Real-world Nmap Module 5: Advanced techniques Module 6: Cloud & Automation
✅ Mini summary: You have completed the entire Certified Nmap User course!
crontab -e0 2 * * * nmap -sn 192.168.1.0/24nano scan.shchmod +x scan.sh./scan.shpip install python-nmappython scan.py
+-------------------+
| Public Internet |
+-------------------+
|
V
+-------------------+
| Cloud Provider |
| (AWS/Azure/GCP) |
+-------------------+
|
+-------+-------+
| | |
V V V
+---+ +---+ +---+
|EC2| |S3 | |RDS|
+---+ +---+ +---+
Start
|
V
Daily Ping Scan
|
V
Weekly Port Scan
|
V
Monthly Vulnerability Scan
|
V
Quarterly Full Assessment
|
V
Report Findings
|
V
End
| Feature | AWS | Azure | GCP |
|---|---|---|---|
| Compute | EC2 | Virtual Machines | Compute Engine |
| Storage | S3 | Blob Storage | Cloud Storage |
| Database | RDS | Azure SQL | Cloud SQL |
| Firewall | Security Groups | NSG | Firewall Rules |
Simple -> Cron Medium -> Bash Scripts Advanced -> Python Enterprise -> Ansible
You have completed Module 6 – the final module of the Certified Nmap User course. You have learned how to use Nmap in cloud environments like AWS, Azure, and GCP. You also learned how to automate scans using cron, Bash, Python, and Ansible. You now understand the importance of continuous monitoring and integration with cloud security tools. You are truly a Certified Nmap User!
Match the term to its definition:
| Term | Definition |
|---|---|
| 1. AWS | A. Amazon's cloud |
| 2. Azure | B. Microsoft's cloud |
| 3. GCP | C. Google's cloud |
| 4. Cron | D. Scheduler |
| 5. Python | E. Programming language |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: You are a security analyst at a company that uses AWS. You need to scan your EC2 instances for open ports. How would you do this safely?
Scenario 2: Your manager wants you to automate daily scans of your network. What automation tools would you use and how?
In groups of 3-4, design a cloud security monitoring plan. Include what to scan, how often, and what automation tools to use. Present your plan to the class.
Write a Bash script that runs a ping scan and saves the results to a file. Schedule it to run daily using cron.
Create a complete cloud scanning plan for a fictional company called "CloudSafe". Include scanning strategies, automation tools, and a monitoring schedule.
Set up a free tier AWS account. Launch an EC2 instance. Use Nmap to scan your instance. Document the process and results.
Write a Python script that scans a range of IPs, saves the results in XML format, and parses the results to find open SSH ports. Submit the script and a sample output.
Multiple choice answers are provided above. Fill-in-the-blank answers:
You have now completed the Certified Nmap User course. You are ready to continue your journey in cybersecurity. Consider learning more about other tools like Metasploit, Wireshark, or Python for automation. The world of cybersecurity is vast and exciting. Keep learning, keep practicing, and always use your skills for good!
🎉 Congratulations! You have completed the Certified Nmap User course. 🎉
You are now a Certified Nmap User!