[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-573784-105":53,"doc-detail-573784-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","nmap-cheat-sheet-english","Nmap Cheat Sheet - English","","Concise Nmap cheat sheet covering target specification, host discovery, port scanning techniques, and port/range selection. Includes scan options for timing and performance (T0–T5), service and version detection, OS detection parameters, firewall/IDS evasion tactics (fragmentation, spoofing, decoys), verbosity/debug controls, interactive toggles, and IPv6 support. Summarizes scripting workflow (-sC, --script, --script-args, --script-trace) plus output formats (-oN/-oX/-oG/-oA) and provides practical example command lines for common scan scenarios.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/nmap-cheat-sheet-english/573784/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/nmap-cheat-sheet-english/573784.png","ImageObject",442,249,{"name":88,"@type":89},"Riley","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-16","2026-10-14",true,{"@type":98,"interactionType":99,"userInteractionCount":76},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"How do I specify targets and input them from a list in Nmap?","Question",{"text":108,"@type":109},"Use target forms like IPs, hostnames, networks, and ranges, or use -iL to read targets from a file list. For random targets, use -iR n; use --exclude or --excludefile to omit hosts from a scan.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"What are common Nmap port scanning techniques and how do I choose one?",{"text":113,"@type":109},"Typical scan types include -sS (TCP SYN), -sT (TCP connect), and -sU (UDP). You can also use SCTP and other TCP flag-based scans such as -sW/-sN/-sF/-sX, depending on what behavior you need.",{"name":115,"@type":106,"acceptedAnswer":116},"How can I enable OS and service/version detection and improve scan detail?",{"text":117,"@type":109},"Use -sV for version detection and -O for OS detection. For deeper insight, add -A (aggressive: -O -sV -sC --traceroute) and increase verbosity with -v or -d for debugging/packet tracing.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},573784,1792087358,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":76,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":9,"language":135,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":61,"update_tm":139,"read_time":4},1374391975076,"https://ap-avatar.wpscdn.com/avatar/14000253ca4ec9f6853?x-image-process=image/resize,m_fixed,w_180,h_180&k=1783305029341752051","Target specification  \nIP address, hostnames, networks, etc  \nExample: [scanme.nmap.org](scanme.nmap.org), [microsoft.com/24](microsoft.com/24), [192.168.0.1](192.168.0.1); 10.0.0-255.1-254  \n-iL file input from list -iR n choose random targets, 0 never ending--exclude --excludefile file exclude host or list from file  \nHost discovery  \n-PS n tcp syn ping  \n-PM netmask req  \n-sL list scan  \n-n no DNS  \n-PA n tcp ack ping -PU n udp ping  \n-PP timestamp req -PE echo req  \n-PO protocol ping -PN no ping  \n-R DNS resolution for all targets  \n--traceroute: trace path to host (for topology map)  \n-sP ping same as –PP –PM –PS443 –PA80  \nPort scanning techniques  \n-sS tcp syn scan -sT tcp connect scan -sU udp scan  \n-sY sctp init scan -sZ sctp cookie echo -sO ip protocol  \n-sW tcp window -sN –sF-sX null, fin, xmas –sA tcp ack  \nPort specification and scan order  \n-p n-m range -p-all ports -p n,m,z individual  \n-p U:n-m,z T:n,m U for udp T for tcp -F fast, common 100 --top-ports n scan the highest-ratio ports -r don’t randomize  \nTiming and performance  \n-T0 paranoid -T1 sneaky -T2 polite  \n-T3 normal -T4 aggresive -T5 insane--min-hostgroup --max-hostgroup  \n--min-rate --max-rate  \n--min-parallelism --max-parallelism  \n--min-rtt-timeout --max-rtt-timeout --initial-rtt-timeout  \n--max-retries --host-timeout --scan-delay  \n[SecurityByDefault.com](SecurityByDefault.com)  \nService and version detection  \n-sV: version detection --all-ports dont exclude ports--version-all try every single probe--version-trace trace version scan activity  \n-O enable OS detection --fuzzy guess OS detection--max-os-tries set the maximum number of tries against a target  \nFirewall/IDS evasion  \n-f fragment packets  \n-S ip spoof source address--randomize-hosts order  \n-D d1,d2 cloak scan with decoys  \n–g source spoof source port--spoof-mac mac change the src mac  \nVerbosity and debugging options  \n-v Increase verbosity level --reason host and port reason  \n-d (1-9) set debugging level --packet-trace trace packets  \nInteractive options  \nv/V increase/decrease verbosity level d/D increase/decrease debugging level p/P turn on/off packet tracing  \nMiscellaneous options  \n--resume file resume aborted scan (from oN or oG output)  \n-6 enable ipv6 scanning  \n-A agressive same as-O-sV-sC--traceroute  \nScripts  \n-sC perform scan with default scripts --script file run script (or all)--script-args n=v provide arguments--script-trace print incoming and outgoing communication  \nOutput  \n-oN normal -oX xml -oG grepable –oA all outputs  \nExamples  \nQuick scan  \nFast scan (port80) Pingscan  \nSlow comprehensive Quick traceroute:  \nnmap-T4-F  \nnmap-T4--max_rtt_timeout 200--initial_rtt_timeout 150--min_hostgroup 512--max_retries 0-n-P0-p80 nmap-sP-PE-PP-PS21,23,25,80,113,31339-PA80,113,443,10042--source-port 53-T4  \nnmap-sS-sU-T4-A-v-PE-PP-PS21,22,23,25,80,113,31339-PA80,113,443,10042-PO--script all nmap-sP-PE-PS22,25,80-PA21,23,80,3389-PU-PO--traceroute","cbCaihUVqoZDTM1H","https://ap.wps.com/l/cbCaihUVqoZDTM1H","pdf",377089,"English","# Target specification\n## Host discovery\n## Port scanning techniques\n## Port specification and scan order\n## Timing and performance\n## Service and version detection\n## Firewall/IDS evasion\n## Verbosity and debugging options\n## Interactive options\n## Miscellaneous options\n## Scripts\n## Output\n## Examples","[{\"question\":\"How do I specify targets and input them from a list in Nmap?\",\"answer\":\"Use target forms like IPs, hostnames, networks, and ranges, or use -iL to read targets from a file list. For random targets, use -iR n; use --exclude or --excludefile to omit hosts from a scan.\"},{\"question\":\"What are common Nmap port scanning techniques and how do I choose one?\",\"answer\":\"Typical scan types include -sS (TCP SYN), -sT (TCP connect), and -sU (UDP). You can also use SCTP and other TCP flag-based scans such as -sW/-sN/-sF/-sX, depending on what behavior you need.\"},{\"question\":\"How can I enable OS and service/version detection and improve scan detail?\",\"answer\":\"Use -sV for version detection and -O for OS detection. For deeper insight, add -A (aggressive: -O -sV -sC --traceroute) and increase verbosity with -v or -d for debugging/packet tracing.\"}]","Nmap Cheat Sheet - English | PDF",1791945939]