[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-571409-105":53,"doc-detail-571409-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","nmap-cheat-sheet-commands","Nmap Cheat Sheet - Commands","","Nmap Cheat Sheet summarizes practical Nmap command options for network discovery and port/service enumeration. It covers target selection (single IPs, ranges, CIDR, files), host discovery controls, common scan techniques such as TCP SYN/T connect/UDP and ACK/Window/Maimon, and detailed port specification including fast and top-port scans. It also explains service and version detection flags, OS detection options, timing and performance presets, and NSE script usage for discovery and safe probing.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/nmap-cheat-sheet-commands/571409/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/nmap-cheat-sheet-commands/571409.png","ImageObject",442,249,{"name":88,"@type":89},"Ophelia","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-27","2026-10-13",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",9,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"How can Nmap scan a single IP, a range, or CIDR targets?","Question",{"text":109,"@type":110},"Use commands like nmap 192.168.1.1 for a single IP, nmap 192.168.1.1 192.168.2.1 for specific IPs, nmap 192.168.1.1-254 for a range, or nmap 192.168.1.0/24 for CIDR notation.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"Which Nmap options control host discovery versus port scanning?",{"text":114,"@type":110},"Use -sn to disable port scanning, and -Pn to disable host discovery so only port scanning occurs.",{"name":116,"@type":107,"acceptedAnswer":117},"How do service/version detection and OS detection work in the cheat sheet?",{"text":118,"@type":110},"Service/version detection uses -sV with options like --version-intensity and -A for OS detection, version detection, script scanning, and traceroute. OS detection is handled with -O and related limits or guessing flags such as --osscan-limit and --max-os-tries.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},571409,1792097046,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":79,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":73},7971461741311,"https://ap-avatar.wpscdn.com/avatar/74000253aff267980c6?x-image-process=image/resize,m_fixed,w_180,h_180&k=1779345379180704826","Nmap Cheat Sheet  \n\n| Target Specification |  |  |\n| --- | --- | --- |\n| Switch | Example\u003Cbr>nmap 192.168.1.1\u003Cbr>nmap 192.168.1.1 192.168.2.1\u003Cbr>nmap 192.168.1.1-254 [nmap scanme.nmap.org](nmap scanme.nmap.org)[ ](nmap scanme.nmap.org)nmap 192.168.1.0/24 | Description Scan a single IPScan specific IPs Scan a range\u003Cbr>Scan a domain\u003Cbr>Scan using CIDR notation |\n| -iL | nmap-iL targets.txt | Scan targets from a file |\n| -iR | nmap-iR 100 | Scan 100 random hosts |\n| --exclude | nmap--exclude 192.168.1.1 | Exclude listed hosts |\n\n\n| Scan Techniques |  |  |\n| --- | --- | --- |\n| Switch | Example\u003Cbr>nmap 192.168.1.1-sS\u003Cbr>nmap 192.168.1.1-sT\u003Cbr>nmap 192.168.1.1-sU\u003Cbr>nmap 192.168.1.1-sA\u003Cbr>nmap 192.168.1.1-sW\u003Cbr>nmap 192.168.1.1-sM | Description\u003Cbr>TCP SYN port scan ( Default) TCP connect port scan ( Default without root privilege) UDP port scan\u003Cbr>TCP ACK port scan TCP Window port scan TCP Maimon port scan |\n| -sS\u003Cbr>-sT\u003Cbr>-sU\u003Cbr>-sA\u003Cbr>-sW\u003Cbr>-sM |  |  |\n\n\n| Host Discovery |  |  |\n| --- | --- | --- |\n| Switch | Example\u003Cbr>nmap 192.168.1.1-3-sL | Description\u003Cbr>No Scan. List targets only |\n| -sL |  |  |\n| -sn | nmap 192.168.1.1/24-sn | Disable port scanning |\n| -Pn | nmap 192.168.1.1-5-Pn | Disable host discovery. Port scan only |\n| -PS | nmap 192.168.1.1-5-PS22-25,80 | TCP SYN discovery on port x. Port 80 by default |\n| -PA | nmap 192.168.1.1-5-PA22-25,80 | TCP ACK discovery on port x. Port 80 by default |\n| -PU | nmap 192.168.1.1-5-PU53 | UDP discovery on port x. Port 40125 by default |\n| -PR | nmap 192.168.1.1-1/24-PR | ARP discovery on local network |\n| -n | nmap 192.168.1.1-n | Never do DNS resolution |\n\n\n| Port Specification |  |  |\n| --- | --- | --- |\n| Switch-p | Example\u003Cbr>nmap 192.168.1.1-p 21 | Description\u003Cbr>Port scan for port x |\n| -p | nmap 192.168.1.1-p 21-100 | Port range |\n| -p | nmap 192.168.1.1-p U:53,T:21-25,80 | Port scan multiple TCP and UDP ports |\n| -p- | nmap 192.168.1.1-p- | Port scan all ports |\n| -p | nmap 192.168.1. 1-p http, https | Port scan from service name |\n| -F | nmap 192.168.1.1-F | Fast port scan ( 100 ports) |\n| --top-ports | nmap 192.168.1. 1--top-ports 2000 | Port scan the top x ports |\n| -p-65535 | nmap 192.168.1. 1-p-65535 | Leaving off initial port in range makes the scan start at port 1 |\n| -p0- | nmap 192.168.1. 1-p0- | Leaving off end port in range makes the scan go through to port 65535 |\n\n[www.stationx.net/nmap-cheat-sheet/](www.stationx.net/nmap-cheat-sheet/)  \n1  \n| Service and Version Detection |  |  |\n| --- | --- | --- |\n| Switch-sV | Example\u003Cbr>nmap 192.168.1.1-sV | Description\u003Cbr>Attempts to determine the version of the service running on port |\n| -sV--version-intensity | nmap 192.168.1. 1-sV--version-intensity 8 | Intensity level 0 to 9. Higher number increases possibility of correctness |\n| -sV--version-light | nmap 192.168.1. 1-sV--version-light | Enable light mode. Lower possibility of correctness. Faster |\n| -sV--version-all | nmap 192.168.1.1-sV--version-all | Enable intensity level 9 . Higher possibility of correctness. Slower |\n| -A | nmap 192.168.1.1-A | Enables OS detection, version detection, script scanning, and traceroute |\n\n\n|  |  |  |  |  |\n| --- | --- | --- | --- | --- |\n| Switch-O | Example\u003Cbr>nmap 192.168.1.1 | -O |  | Description\u003Cbr>Remote OS detection using TCP/ IP stack fingerprinting |\n| -O--osscan-limit | nmap 192.168.1.1 | -O | --osscan-limit | If at least one open and one closed TCP port are not found it will not try OS detection against host |\n| -O--osscan-guess | nmap 192.168.1.1 | -O | --osscan-guess | Makes Nmap guess more aggressively |\n| -O--max-os-tries | nmap 192.168.1.1 | -O | --max-os-tries 1 | Set the maximum number x of OS detection tries against a target |\n| -A | nmap 192.168.1.1 | -A |  | Enables OS detection, version detection, script scanning, and traceroute |\n\n\n| Timing and Performance |\n| --- |\n| Switch  Example  Description\u003Cbr>-T0 nmap 192.168.1.1-T0 Paranoid (0) Intrusion Detection System evasion\u003Cbr>-T1 nmap 192.168.1.1-T1 Sneaky ( 1)","cbCairgalsIDMNBu","https://ap.wps.com/l/cbCairgalsIDMNBu","pdf",294159,"English","# Target Specification\n## Scan Techniques\n## Host Discovery\n## Port Specification\n# Service and Version Detection\n## OS Detection\n# Timing and Performance\n# NSE Scripts","[{\"question\":\"How can Nmap scan a single IP, a range, or CIDR targets?\",\"answer\":\"Use commands like nmap 192.168.1.1 for a single IP, nmap 192.168.1.1 192.168.2.1 for specific IPs, nmap 192.168.1.1-254 for a range, or nmap 192.168.1.0/24 for CIDR notation.\"},{\"question\":\"Which Nmap options control host discovery versus port scanning?\",\"answer\":\"Use -sn to disable port scanning, and -Pn to disable host discovery so only port scanning occurs.\"},{\"question\":\"How do service/version detection and OS detection work in the cheat sheet?\",\"answer\":\"Service/version detection uses -sV with options like --version-intensity and -A for OS detection, version detection, script scanning, and traceroute. OS detection is handled with -O and related limits or guessing flags such as --osscan-limit and --max-os-tries.\"}]","Nmap Cheat Sheet - Commands | PDF",1791916237]