Nmap (Network Mapper) Training in New York, USA

This course provides in-depth training on Nmap (Network Mapper), the industry-standard tool for network scanning, reconnaissance, and vulnerability detection. Participants will learn how to use Nmap for host discovery, service enumeration, firewall evasion, and security auditing. Hands-on exercises will focus on real-world penetration testing, network troubleshooting, and cyber defense techniques.

Course Agenda

Introduction to Nmap

• Overview of Nmap's capabilities and use cases

• Installing and configuring Nmap on Windows, Linux, and macOS

• Understanding IP scanning basics and network enumeration

Host Discovery and Network Scanning

• Performing ping sweeps and ARP scans

• Identifying live hosts and active devices on a network

• Detecting firewalled and stealthed hosts

• Using traceroute with Nmap

Port Scanning Techniques

• Understanding TCP, UDP, and SCTP scanning

• Conducting full, stealth (SYN), and aggressive scans

• Detecting open, closed, and filtered ports

• Evading Intrusion Detection Systems (IDS) and firewalls

Service and OS Detection

• Identifying running services and their versions

• Detecting operating systems and system uptime

• Enumerating SSL/TLS services and vulnerabilities

• Performing banner grabbing for deeper insights

Nmap Scripting Engine (NSE)

• Introduction to NSE for automated scanning

• Using pre-built security scripts for vulnerability assessment

• Writing custom scripts for custom security checks

• Running parallel scans for faster results

Advanced Scanning Techniques

• Performing firewall and IDS evasion techniques

• Spoofing IP addresses and MAC addresses

• Scanning through proxies and VPNs

• Conducting timing and performance optimization

Security Auditing and Vulnerability Scanning

• Scanning for misconfigured services and weak passwords

• Detecting vulnerabilities in web servers, databases, and IoT devices

• Exporting scan results for compliance and reporting

• Integrating Nmap with Metasploit, Wireshark, and SIEM tools