Scanning Network

Our target: scanme.nmap.org
Tools: nslookup、nmap

nslookup

nslookup is a network administration command-line tool for querying the Domain Name System(DNS) to obtain a domain name or IP
address mapping, or other DNS records. The name "nslookup" means "name server lookup".

Nmap

Nmap is a free and open-source network scanner.

Simply scan with parameter -vv. Its function is to output detailed scanning information.

If u are trying to scan a network segment that is tough to kali to display all information on the screen, then u need pipe it to a file.

Argument -oG means output scan in Grepable format.

After u finish a slight scan, u find the active and vulnerable machine. We use awk tool to extract the IP addresses.

Repeat, we output the IP addresses list to a file, then full scan the active machines by using nmap.

Curl to get location information