>> Welcome to the first lesson on Zenmap, which is.
Nmap's graphical user interface.
This lesson will cover the basics.
Hardcore network and
security practitioners generally consider
point-and-click environments as
the weaker versions of the real thing.
Even though I think you should work hard
to master Nmap at the command line,
I hope to show you that Nmap's GUI can provide
real value when it's
available on your network scanning station.
It really can make you faster and
more effective in many situations.
Let's get started. Here are
the learning objectives for this lesson.
First,
we'll answer the question of whether you should use
the Zenmap GUI or the command-line version of Nmap.
Next, we'll discuss the benefits of using Zenmap.
Then we'll talk about the best ways to
learn Zenmap and finally,
we'll run through a lab on using it.
When network admins and
security professionals start using Nmap,
they always wonder whether they should start
with the command line or with Zenmap.
In general, I think you should start
with Nmap at the command line.
Getting comfortable there will always make you
more effective when you toggle to Zenmap.
Additionally, Zenmap may not be
available on the machine you're using
>> to run your scans,
>> for example, if you're running a penetration test on
a client's network using only their machines.
Nmap is easy to install and leaves less of a trace.
Penetration testers may find that Nmap's command line
is the best or only option in certain circumstances.
One really nice thing about Nmap is that you can
create and run a bunch of scans from a batch file,
then come back later and analyze the results.
To answer the main question on this slide,
I believe that in order to be
proficient in Nmap and Zenmap,
you must get good at running it from the command line.
With that said, there are
a lot of benefits to using Zenmap.
For one thing, it provides
a simple point-and-click environment.
This allows you to choose
the type of scans you want to run
easily then simply run them
without typing out a long line of code.
This type of graphical environment
may be much easier for some people,
especially those who are visually
oriented or visual learners.
Another great benefit of using Zenmap is
the ability to create and save custom scan profiles.
We'll touch on these in the next lesson.
They allow you to set a bunch of
scan options and save them as
named scans so that you can run
them against different targets
>> next time you open Zenmap.
>> Zenmap also provides you
with a good way to learn and map.
All of the scan types and options are laid out
categorically and you can see
the way and Nmap scans are constructed.
Finally, I find it much easier to learn
about NSE scripts from inside Zenmap.
There are so many NSE scripts and all of
the developer's help information is
accessible from inside Zenmap.
You can just click on the script you
want to learn about and read
about what it does and
what command-line arguments it accepts.
I'll show you this in the lab.
What is the best way to learn Zenmap?
This slide provides you with some good options.
Most of them are common sense.
Find the method that works best for you.
My sincere hope is that
this training will be a great launching point for you.
One important tip in this slide though is
to run Zenmap as a privileged user.
In Windows, this means running it as a local admin.
Some scans simply won't work as a regular user.
Other than that, play around with it.
Go through the labs with me
and you'll have a running start.
Unless you're running intrusive or hostile scans
against unknown targets,
you don't have much to lose.
Run some simple scans and save the results.
Start with a goal in mind with each scan.
Ask the question, what information
do I want to learn about the target?
This helps to focus your scan and I'm
certain that Nmap will leave you satisfied.
Beyond that, read the official book
>> on the Nmap website.
>> I'm positive that any question you
will have will be answered there.
Onto the lab. In this lab,
we're going to run through the most
important aspects of Zenmap.
When Zenmap opens, it sits there awaiting your input.
If you don't have a basic
>> understanding of how it works,
>> you'll definitely be left wondering what to do next.
There are currently no wizards to
guide you through running various scans.
Let's walk through the basics for now,
then I'll walk you through a little bit more detail
later. Let's do it.
Welcome to the Zenmap basics lab.
In this lab, we're going to go through
the most important components of Zenmap, which are one,
the command text box,
two the target dropdown and textbox,
and three, the profile drop-down.
In the next lesson, we're going to
cover custom scan profiles.
But I'll briefly show you one of
the reasons I really like to use
Zenmap to find out information
about NSE scripts in the profile editor.
We'll finish out the lab by saving a scan,
then opening a previous scan.
As you can probably tell, I'll be
using Windows 10 for this lab.
To start out, let's open up Zenmap.
Click on the Start button.
Start typing Zenmap.
Once it pops up, right-click run as administrator
[NOISE].
Now that you have Zenmap open,
the first thing I want to call your attention
to is right here,
and that is the command text box.
The reason why I think it's the most important,
and I'm sure you'll agree,
is that basically,
it's the equivalent to the command line.
In other words, we can
just type whatever we would type at
the command line in
this command text box and then over to the right,
hit Scan and the results
will show up in this Nmap output.
We'll do a nmapscanme.nmap.org and then click on Scan.
You can see the results building down here in
the Nmap output. There you have it.
My main point is that any scan that
you build at the command line,
you can copy and paste i
>> t into this command text box and
>> then hit scan and the results will pop up here.
It goes the other way too.
If you want to build out your scan in Zenmap,
you can build it out
here and then simply
copy and paste it back to the command line.
The next thing I want to show you
in Zenmap is the target.
Right here you can see that after I built
that command in the command text box,
the target was auto-populated.
It goes in the reverse too.
Again type a different target or
>> use my default gateway,
>> which is 192.168.1.254.
You can see that in the command,
the command line was automatically built for
you and changed the target to my default gateway.
I can hit scan again.
There are the results,
and those results would match the results that we got
when we scan my default gateway
from the command line as well.
The next thing I wanted to show you
is the profile drop-down.
If you click this drop-down list,
you'll see a list of default profiles
that were built out by the creators of Nmap.
They're pretty cool scans that you can
start with and the neat thing about it is,
you can choose either any one of these,
and you'll see the command line built out for you.
Let's do a intense scan of my default gateway.
There you see all of the options that were
auto-created just by choosing the profile.
I'll go ahead and run this scan and we'll
look at the differences in the results.
The timing template right
here is four, which is aggressive.
This dash A makes it an advanced
scan and as we talked about before,
dash v is increasing
the verbosity or detail that is shown in the output.
Now that that scan completed,
we can scroll down and look at all of the details.
The dash A really does
a lot of stuff and provides a lot of detail.
If you ever want a lot of detail about a host,
just remember dash A.
We'll go over all those different options later.
But it's a good one to remember.
Now what I want to show you is saving your scan.
After the scan is complete,
you can click on Scan and then Save Scan.
It'll bring up a dropdown.
Since we ran several scans,
it's going to ask you which one you want to save
and I want to save that last one that we ran,
which is at the bottom of the list
and then we'll click Save.
If you remember from the previous lesson,
we created a folder in the root of C called results.
I'm going to navigate to that folder
and there's all the results
from the previous scans that we did.
Next to name, we'll call it
results8.xml and then click Save.
I'm going to go ahead and close out Zenmap just to show
you what that did basically.
I'll reopen
Zenmap [NOISE].
Now we're going to go and find
that scan that we just ran.
Click on Scan, Open scan.
It automatically shows your recently used scans.
But I'm going to go ahead and navigate to C, results.
Then results8 was the one
that we just ran, I'll open it.
If you click on Nmap output,
you can see exactly all of
the output that we gathered from that scan.
You can also see the command
that was used to create that output.
Neat thing about it is you can
run the scan again if you want,
or you can just evaluate,
all of the stuff that was gathered from that scan.
As I said before, we're going to cover
the Nmap scripting engine more in lessons later.
But for now, I just wanted to
show you how easy it is to get
quick help information on NSE scripts
>> from within Zenmap.
>> The way that you do that is we'll click on
Profile and then edit selected profile.
It's going to edit the intense scan profile.
But that doesn't really matter too much
because we're not going to make any changes to it.
Just click on Edit Selected Profile and
then you see this tab at
the top called Scripting, click on that.
I'll maximize that window.
Over to the left is all of the available NSE scripts.
The thing I like about it is instead of having to type
a NSE script help command at the command line,
you can just come into Zenmap and click
on any of your scans and over to the right,
you can see that it gives you detail
about what category it belongs in,
a description of what that NSE script does.
Some are more detailed than others.
Also shows you sample output.
Then it shows you where you can get
detailed help on that script.
It's just nice because you
can look at any of the scans that you're
interested in and learn about
them and it's a point and click environment.
We'll end these Zenmap basics lab there,
thanks for going through this lab with me.
In this lesson, we discussed whether you should
use the Zenmap GUI or the command-line version of Nmap.
Next, we discussed the benefits of using Zenmap.
Then we talked about the best ways to learn Zenmap.
Finally, we ran through a lab on using it.
Thank you so much for walking through this lesson
with me and I'll talk to you in the next lesson.