Nmap Scan

Network reconnaissance with port scanning identifies which ports are open and what services are running on a target. Nmap automates comprehensive scanning across single hosts or large networks, detecting open ports, service versions, and potential vulnerabilities in a structured two-phase approach for faster results.

Port scanning works on both single hosts and large CIDR ranges. Nmap adapts to your target scale—from a single IP to thousands of hosts—using optimized scan types like quick full-port discovery followed by targeted service detection, then outputs results in multiple formats for analysis.

Two-phase scanning first performs a fast discovery of all open ports across your target, then runs detailed service detection, OS fingerprinting, and vulnerability checks on only the active ports. This saves time while ensuring thorough reconnaissance and reduces noise in your results.

OS detection and SYN scans require elevated privileges to send raw packets and fingerprint network stacks. The skill handles privilege requirements and supports host-down detection to skip unreachable targets, automating setup so your scans complete reliably across mixed network conditions.

Scan results export in multiple formats simultaneously for flexible downstream analysis—structured data for parsing, human-readable reports, and machine-readable output. This lets you feed results directly into vulnerability screening, service enumeration, or reporting workflows without manual conversion.

Vulnerability detection integrates Nmap Scripting Engine checks during reconnaissance to flag misconfigurations and known weaknesses alongside open ports and service versions. Combined with OS fingerprinting, this builds a complete attack-surface map for prioritizing further security assessment.