Vulnerability Scanning using Nmap

Attackers use vulnerability-scanning tools such as Nmap to identify the IoT devices connected to the network along with their open ports and services. Nmap generates raw IP packets in different ways to identify live hosts or devices on the network, services offered by them, their operating systems, type of packet filters used, etc. Attackers can also use Angry IP Scanner tool for this purpose.

Commands

Scan a Specific IP Address

nmap -n -Pn -sS -pT:0-65535 -v -A -oX <Name><IP>

Complete Scan for TCP and UDP Services and Ports

nmap -n -Pn -sSU -pT:0-65535,U:0-65535 -v -A -oX <Name><IP>

Identify IPv6 Capabilities

nmap -6 -n -Pn -sSU -pT:0-65535,U:0-65535 -v -A -oX <Name><IP>