- [Instructor] In this segment,
we're gonna take a closer look at ZenMap,
which is the official Nmap Graphical User Interface or GUI.
First released in 2007,
Nmap continues to be one of the most popular
and beloved security tools.
The Nmap, which stands for Network Mapper,
is a free and open-source utility
for network discovery and security auditing.
Nmap uses raw IP packets in very novel ways
to determine what hosts are available on the network,
what services those hosts are offering,
what operating systems they're running,
what type of packet filters and firewalls are in use,
and dozens of other characteristics.
Now, the Nmap Suite includes an advanced GUI
and results viewer known as ZenMap.
That's what you're looking at right now.
ZenMap is a multi-platform Linux, Windows, Mac,
OSX, BSD, et cetera, free and open-source application
which aims to make Nmap easy for beginners to use
while providing advanced features
for experienced Nmap users.
Now, I took the liberty of setting up a pre-configured scan
of my local network so that we could look at the results.
And we started with the target.
I had to say what the target was gonna be.
I said 192, 168, 0.1 through 254.
That's my local network.
I had to choose the profile for the scan,
and there's a number of different profiles to choose from,
from intense scan to intense scan, all TCP ports,
a quick scan, a regular scan,
even a slow comprehensive scan that, hopefully,
will, you know, fly underneath the radar
and not be detected.
So looking here in the body,
I'm gonna scroll back up to the top.
You can see that Nmap looked at the entire range
to try to find hosts that were alive and responding.
And eventually, it did find a number of hosts
that you can see over here on the left-hand side,
.1, .2, 118, 163, 171, 191, 195, and 197.
Now, I can organize those hosts in this panel
either by operating system or by IP address.
If I wanna just get this quick visual of,
okay, what are those hosts,
I'm gonna come over to the fourth tab
and look at host details.
I'm gonna find out what the host is, what it's IP address,
the number of open ports, it's uptime, and it's last boot.
So I can see here, I've got a Linux device,
I've got a VxWorks, looks like an Apple Mac device,
one that couldn't be identified,
Windows server 2008, a Windows 10, another Apple device,
and a device that looks like it's going to be probably
a printer 'cause it's running
the HP iLO 4 remote management interface.
So quick and dirty information on each one of the hosts.
If I'm interested in what ports are open,
well, I can do a quick look through each one
of my hosts here on the left-hand side
and find out what the ports, the protocol, the state,
the service, and the version is.
Maybe I don't wanna look through each one of my hosts,
I'm just looking for a particular service,
so I'm gonna click on the services tab in the panel,
and maybe I wanna know if any of the devices I just scanned
are running FTP.
Well, there we go.
What if they're running HTTP?
Well, now I've got a list of who's running HTTP,
the port, again, protocol, the current state,
and the version.
So a lot of really good information, you know,
that I can quickly use for both inventory purposes
as well as to begin enumerating details
about each one of these hosts.
I can also look a little topology
so I can see the relationship of those devices to my scan.
I can see if the host was not port scanned,
a host with fewer than three open ports,
host with three to six ports, more than six ports.
I can see the trace route connections,
and then, by the various icons, I can learn more information
so I can start mapping out my network as well.
Now, one of the really nice things about ZENworks
is that I can go and I could save the scans if I want.
So frequently used scans can be saved as profiles
to make them easy to run repeatedly.
Scan results can be saved and viewed later.
I can save, take those saved scan results
and compare them with another one to see how they differ.
And the results of the recent scans
are all stored in a searchable database.
You definitely should get to know this program,
this is ZenMap,
as well as the classic command line Nmap executable.
Lots of help available too.
If you go up to the help screen,
it's going to tell you that,
lemme bring it over so you can actually see it,
there we go, it's gonna tell you
that you can get more documentation
at the Nmap documentation directory
or at the ZenMap webpage itself,
but a lot of really good help
and documentation available to you to learn, you know,
what can be a very simple program
or an extraordinarily complex program.
Before we wrap up, just a bit of trivia for you about Nmap,
that Nmap has actually been featured in 12 movies
including "Matrix Reloaded," "Die Hard 4,"
"Girl with the Dragon Tattoo" and "The Bourne Ultimatum."
And that, my friends, is a closer look at ZenMap.