Tutorial NMAP

Penggunaan option –O diperuntukan untuk mendeteksi jenis sistem operasi, sebagai berikut:

C:\> nmap -O ristbook

Starting nmap V. 3.00 ( www.insecure.org/nmap )

Interesting ports on ristbook (128.1.71.103):

(The 1589 ports scanned but not shown below are in state: closed)

Port State Service

7/tcp open echo

9/tcp open discard

13/tcp open daytime

17/tcp open qotd

19/tcp open chargen

80/tcp open http

135/tcp open loc-srv

139/tcp open netbios-ssn

443/tcp open https

445/tcp open microsoft-ds

1026/tcp open LSA-or-nterm

1031/tcp open iad2

Remote operating system guess: Windows Millennium Edition (Me), Win 2000,

or Win XP

Nmap run completed — 1 IP address (1 host up) scanned in 2 seconds

C:\>

Berikut ini contoh untuk hasil pada sistem operasi Linux:

C:\> nmap -O adminristek

Starting nmap 3.45 ( http://www.insecure.org/nmap ) at 2003-09-26 18:01

SE Asia

Standard Time

Interesting ports on adminristek (128.1.9.81):

(The 1646 ports scanned but not shown below are in state: closed)

PORT STATE SERVICE

21/tcp open ftp

23/tcp open telnet

25/tcp open smtp

79/tcp open finger

80/tcp open http

98/tcp open linuxconf

113/tcp open auth

139/tcp open netbios-ssn

513/tcp open login

514/tcp open shell

1984/tcp open bigbrother

Device type: general purpose

Running: Linux 2.1.X|2.2.X

OS details: Linux 2.1.19 – 2.2.25, Linux 2.2.19 on a DEC Alpha

Nmap run completed — 1 IP address (1 host up) scanned in 12.020 seconds

C:\>

Berikut ini contoh untuk hasil pada sebuah Cisco 1750:

C:\> nmap -sS -O 128.1.8.5

Starting nmap 3.45 ( http://www.insecure.org/nmap ) at 2003-09-30 15:18

SE Asia

Standard Time

Interesting ports on 128.1.8.5:

(The 1655 ports scanned but not shown below are in state: closed)

PORT STATE SERVICE

23/tcp open telnet

79/tcp open finger

Device type: router|switch

Running: Cisco IOS 11.X

OS details: Cisco switch/router with IOS 11.1(7)-11.2(8.10), Cisco

Router/Switch

with IOS 11.2

Nmap run completed — 1 IP address (1 host up) scanned in 30.160 seconds

C:\>

Jika host target hanya membuka port 80 (http), maka kita dapat mensiasati dengan port scanning melalui port tersebut sebagai berikut:

C:\>nmap -PT80 -O webserver

Starting nmap 3.45 ( http://www.insecure.org/nmap ) at 2003-09-26 18:55

SE Asia

Standard Time

Interesting ports on webserver (128.1.7.13):

(The 1647 ports scanned but not shown below are in state: closed)

PORT STATE SERVICE

25/tcp open smtp

80/tcp open http

135/tcp open msrpc

139/tcp open netbios-ssn

445/tcp open microsoft-ds

1027/tcp open IIS

1433/tcp open ms-sql-s

1503/tcp open imtc-mcs

1720/tcp open H.323/Q.931

3372/tcp open msdtc

Device type: general purpose

Running: Microsoft Windows 95/98/ME|NT/2K/XP

OS details: Microsoft Windows Millennium Edition (Me), Windows 2000

Professional

or Advanced Server, or Windows XP

Nmap run completed — 1 IP address (1 host up) scanned in 7.520 seconds

[Keep Share]

JhezeR

Blogger | Pencari Ilmu | Internet Maniak | Pemburu Kesuk$e$an | Penikmat Musik, Film & Pertandingan | Follow @Jhez3R | Blogger Tamu @JhezeR.com