nmap

nmap notes - started 04-13-2019

nmap - host discovery/asset inventory

nmap -sP 10.0.9.0/24 | grep -v "Host" | tail -n +3 | tr '\n' ' ' | sed 's|Nmap|\nNmap|g' | grep "MAC Address" | cut -d " " -f5,8-15
10.0.9.2 52:54:00:12:35:00 (QEMU virtual NIC)
10.0.9.3 08:00:27:36:22:F4 (Oracle VirtualBox virtual NIC)
10.0.9.5 08:00:27:BA:E4:27 (Oracle VirtualBox virtual NIC)
10.0.9.6 08:00:27:33:8A:CF (Oracle VirtualBox virtual NIC)
10.0.9.7 08:00:27:C3:FA:53 (Oracle VirtualBox virtual NIC)
10.0.9.8 08:00:27:A7:44:66 (Oracle VirtualBox virtual NIC) 

To change network interface use -e with network card interface. nmap -e wlan0 -sP 10.0.9.0/24 | grep -v "Host" | tail -n +3 | tr '\n' ' ' | sed 's|Nmap|\nNmap|g' | grep "MAC Address" | cut -d " " -f5,8-15

sudo nmap -sP 10.0.9.0/24 | awk '/Nmap scan report for/{printf $5;}/MAC Address:/{print " => "$3;}' | sort

nmap -n -sP 10.0.9.0/24 | awk '/Nmap scan report/{printf $5;printf " ";getline;getline;print $3;}'

sudo nmap -sn 10.0.9.0/24 | awk '/Nmap scan report for/{printf $5;}/MAC Address:/{print " => "substr($0, index($0,$3)) }' | sort
10.0.9.1 => 52:54:00:12:35:00 (QEMU virtual NIC)
10.0.9.2 => 52:54:00:12:35:00 (QEMU virtual NIC)
10.0.9.3 => 08:00:27:36:22:F4 (Oracle VirtualBox virtual NIC)
10.0.9.4
10.0.9.5 => 08:00:27:BA:E4:27 (Oracle VirtualBox virtual NIC)
10.0.9.6 => 08:00:27:33:8A:CF (Oracle VirtualBox virtual NIC)
10.0.9.7 => 08:00:27:C3:FA:53 (Oracle VirtualBox virtual NIC)
10.0.9.8 => 08:00:27:A7:44:66 (Oracle VirtualBox virtual NIC)

https://github.com/laconicwolf/Nmap-Scan-to-CSV

nmap -e wlan0 -sn -oG - 192.168.86.0/24 | perl -lanE 'if(/initiated (.*?) as:/){$d=$1;$,=","}else{print@F[1,4],$d,$F[2]=~/\((.*)\)/ if/Status:/}'
10.0.9.1,Up,Thu Mar 28 04:03:09 2019,
10.0.9.2,Up,Thu Mar 28 04:03:09 2019,
10.0.9.3,Up,Thu Mar 28 04:03:09 2019,
10.0.9.5,Up,Thu Mar 28 04:03:09 2019,
10.0.9.6,Up,Thu Mar 28 04:03:09 2019,
10.0.9.7,Up,Thu Mar 28 04:03:09 2019,
10.0.9.8,Up,Thu Mar 28 04:03:09 2019,
10.0.9.4,Up,Thu Mar 28 04:03:09 2019,

Other notes to look into:

https://highon.coffee/blog/nmap-cheat-sheet/ https://pypi.org/project/python-nmap/ lansweeper - web based asset management for web scans owasp zap - for web vuln, similar to burp