Nmap Scan

Automates two-phase Nmap scanning for ports, services, versions, and NSE vulnerabilities.

811|123|Updated Nov 17, 2025
One-click install
npx skills add https://github.com/BrownFineSecurity/iothackbot --skill nmap-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Nmap Scan
Source: https://github.com/BrownFineSecurity/iothackbot/tree/main/.claude/skills/nmap-scan
Command: npx skills add https://github.com/BrownFineSecurity/iothackbot --skill nmap-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nmap.

What problem does it solve?

This Skill automates comprehensive network reconnaissance and port scanning, eliminating manual Nmap command crafting and ensuring all open ports are discovered efficiently. It helps you quickly identify running services, their versions, and potential vulnerabilities, reducing the time spent on initial network discovery.

Core Features & Use Cases

  • Two-Phase Scanning: Automatically performs a fast all-port discovery followed by targeted service and version detection on open ports.
  • Service & Version Detection: Identifies services, their versions, and runs default NSE scripts for initial vulnerability checks.
  • Output Management: Organizes scan results in human-readable, XML, and grepable formats for easy analysis and integration.
  • Use Case: Scan a target IP to uncover all open ports and then automatically perform detailed service enumeration to identify web servers, SSH, or IoT-specific protocols running on those ports.

Quick Start

Use the Nmap Scan skill to perform a default two-phase scan on 192.168.1.100 and report the open ports and services.

Frequently Asked Questions about Nmap Scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a network for open ports and running services?

Network port scanning identifies open ports and services by sending probe packets to target hosts. This Skill performs two-phase scanning: fast port discovery across all 65,535 ports, then targeted service and version detection on open ports using Nmap, providing structured results in multiple formats for rapid reconnaissance.

Can I detect service versions and vulnerabilities during a port scan?

Yes. Port scanning with version detection runs default NSE scripts on discovered services to identify versions and potential vulnerabilities. This Skill automatically enumerates services, their versions, and script findings in a single workflow, eliminating separate manual detection steps.

What's the best way to perform network reconnaissance on a range of hosts?

Network reconnaissance across ranges uses optimized scanning workflows to discover all open ports efficiently. This Skill applies two-phase scanning to hosts or network ranges, automatically prioritizing all-port discovery first, then detailed service enumeration, outputting results in human-readable, XML, and grepable formats.

How do I automate Nmap scanning without manual command crafting?

Automated Nmap scanning eliminates complex command syntax by abstracting the scanning workflow. This Skill handles two-phase port discovery and service detection automatically, manages output formatting, and structures results for analysis, reducing time spent on initial reconnaissance.

Does this work for IoT device discovery and service detection?

Yes. IoT security reconnaissance identifies services and protocols running on network-connected devices. This Skill performs port scanning and service version detection applicable to IoT environments, discovering open ports and detecting IoT-specific protocols and services for vulnerability assessment.

What output formats does network scanning produce for downstream analysis?

Scan output is organized in human-readable, XML, and grepable formats for flexible analysis and integration. These formats enable easy parsing, automated report generation, and integration with security tools downstream.