{"id":6188,"date":"2021-05-15T13:53:07","date_gmt":"2021-05-15T13:53:07","guid":{"rendered":"https:\/\/miloserdov.org\/?p=6188"},"modified":"2021-05-15T16:33:16","modified_gmt":"2021-05-15T16:33:16","slug":"port-scanner-for-windows","status":"publish","type":"post","link":"https:\/\/miloserdov.org\/?p=6188","title":{"rendered":"Port scanner for Windows"},"content":{"rendered":"<div class=\"0b20205ac99e89c6cabdb919fd9d1a8a\" data-index=\"1\" style=\"float: none; margin:10px 0 10px 0; text-align:center;\">\n<script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block; text-align:center;\"\r\n     data-ad-format=\"fluid\"\r\n     data-ad-layout=\"in-article\"\r\n     data-ad-client=\"ca-pub-7219829351026140\"\r\n     data-ad-slot=\"9942251718\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\r\n\r\n\n<\/div>\n<p style=\"text-align: justify;\">\n\tIf you need to scan ports of computers and devices on a local network or on the Internet from Windows, then one of the best options is a combination of <a href=\"https:\/\/en.kali.tools\/?p=1433\" target=\"_blank\" rel=\"noopener\">Nmap<\/a> and Zenmap (a graphical interface for Nmap).\n<\/p>\n<p style=\"text-align: justify;\">\n\tNmap has a large number of scanning options, and Zenmap&#39;s graphical interface makes the program extremely easy to use.\n<\/p>\n<p style=\"text-align: justify;\">\n\tNmap features include:\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\tport scanning\n\t<\/li>\n<li style=\"text-align: justify;\">\n\t\tdetermining the operating system of the remote host\n\t<\/li>\n<li style=\"text-align: justify;\">\n\t\tidentification of services, software and their versions on a remote host\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tUsing Nmap scripts, you can check remote hosts for vulnerabilities, weak passwords, collect certain information, look for services that allow anonymous login, and perform other tasks related to the actions of a network administrator or penetration tester.\n<\/p>\n<p style=\"text-align: justify;\">\n\tTo download a port scan program, go to the Nmap download page: <a href=\"https:\/\/nmap.org\/download.html\" rel=\"noopener\" target=\"_blank\">https:\/\/nmap.org\/download.html<\/a>. Find the link to the .exe file there. You can see all the files available for download here: <a href=\"https:\/\/nmap.org\/dist\/\" rel=\"noopener\" target=\"_blank\">https:\/\/nmap.org\/dist\/<\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tRun the downloaded Nmap installer, in addition to the main program, it will also install several components that are necessary for Nmap to work on Windows.\n<\/p>\n<p style=\"text-align: justify;\">\n\tWhen everything is ready, a program shortcut will appear on your desktop:\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/71.jpg\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6198\" height=\"208\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/71.jpg\" width=\"227\" \/><\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tThe main program window looks like this:\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/zenmap.png\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6197\" height=\"693\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/zenmap.png\" width=\"736\" \/><\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tIn the <strong>Target<\/strong> field, you need to specify the site address (URL), IP or range of IP addresses for scanning.\n<\/p>\n<p style=\"text-align: justify;\">\n\tIn the <strong>Profile<\/strong> field, select the desired profile from the drop-down list.\n<\/p>\n<h2 style=\"text-align: justify;\">\n\tHow to Specify Target in Zenmap (Nmap)<br \/>\n<\/h2>\n<p style=\"text-align: justify;\">\n\tSite addresses should be specified without a protocol, for example:\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\tmi-al.ru\n\t<\/li>\n<li style=\"text-align: justify;\">\n\t\tsuip.biz\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tIt would be incorrect to indicate the form https:\/\/mi-al.ru, that is, URL.\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/zenmap-2.png\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6196\" height=\"921\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/zenmap-2.png\" width=\"967\" srcset=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/zenmap-2.png 967w, https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/zenmap-2-768x731.png 768w\" sizes=\"(max-width: 967px) 100vw, 967px\" \/><\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tIP addresses can be specified one by one, for example, 192.168.0.1; using CIDR notation like 192.168.0.1\/24; as well as specifying ranges in one or more octets, for example, 192.168.0.1-100, or 192.160-170.50-100.1\n<\/p>\n<h2 style=\"text-align: justify;\">\n\tWhat Zenmap Profiles mean<br \/>\n<\/h2>\n<p style=\"text-align: justify;\">\n\tThe profiles in the Zenmap main window are a collection of options for typical scans. Let&#39;s take a look at all Zenmap profiles.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Intense scan<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tAn intense, comprehensive scan. The -A option enables OS detection (<strong>-O<\/strong>), version detection (<strong>-sV<\/strong>), script scanning (<strong>-sC<\/strong>), and traceroute (<strong>&#8211;traceroute<\/strong>). Without root privileges only version detection and script scanning are run. This is considered an intrusive scan.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Intense scan plus UDP<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tDoes OS detection (<strong>-O<\/strong>), version detection (<strong>-sV<\/strong>), script scanning (<strong>-sC<\/strong>), and traceroute (<strong>&#8211;traceroute<\/strong>) in addition to scanning TCP and UDP ports.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Intense scan, all TCP ports<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tScans all TCP ports, then does OS detection (<strong>-O<\/strong>), version detection (<strong>-sV<\/strong>), script scanning (<strong>-sC<\/strong>), and traceroute (<strong>&#8211;traceroute<\/strong>).\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Intense scan, no ping<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tDoes an intense scan without checking to see if targets are up first. This can be useful when a target seems to ignore the usual host discovery probes.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Ping scan<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tThis scan only finds which targets are up and does not port scan them.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Quick scan<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tThis scan is faster than a normal scan because it uses the aggressive timing template and scans fewer ports.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Quick scan plus<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tA quick scan plus OS and version detection.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Quick traceroute<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tTraces the paths to targets without doing a full port scan on them.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Regular scan<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tA basic port scan with no extra options.\n<\/p>\n<ul>\n<li style=\"text-align: justify;\">\n\t\t<strong>Slow comprehensive scan<\/strong>\n\t<\/li>\n<\/ul>\n<p style=\"text-align: justify;\">\n\tThis is a comprehensive, slow scan. Every TCP and UDP port is scanned. OS detection (<strong>-O<\/strong>), version detection (<strong>-sV<\/strong>), script scanning (<strong>-sC<\/strong>), and traceroute (<strong>&#8211;traceroute<\/strong>) are all enabled. Many probes are sent for host discovery. This is a highly intrusive scan.\n<\/p>\n<p style=\"text-align: justify;\">\n\tFor example, if I want to know which hosts on the subnet are pinged, then I select the <strong>Ping scan<\/strong> profile.\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/74.jpg\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6195\" height=\"453\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/74.jpg\" width=\"725\" \/><\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tWith a handy profile editor, you can edit and create new profiles.\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/75.jpg\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6194\" height=\"457\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/75.jpg\" width=\"800\" srcset=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/75.jpg 800w, https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/75-768x439.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tAlthough the use of the profile editor contains a description of the actions to be performed and, therefore, does not require knowledge of Nmap options, for a deeper understanding of the program you can see the description of all Nmap options at <a href=\"https:\/\/en.kali.tools\/?p=1433\" target=\"_blank\" rel=\"noopener\">https:\/\/en.kali.tools\/?p=1433<\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tIf you want to scan all TCP ports, then specify the target and enter &ldquo;<strong>nmap -p 1-65535<\/strong>&rdquo; as a command\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/76.jpg\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6193\" height=\"898\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/76.jpg\" width=\"737\" \/><\/a>\n<\/p>\n<h2 style=\"text-align: justify;\">\n\tScan results<br \/>\n<\/h2>\n<p style=\"text-align: justify;\">\n\tThe results from the last scan are visible in the Nmap <strong>Output<\/strong> tab. On the left side, you can switch between <strong>Sites<\/strong> and <strong>Services<\/strong>. When you click on a specific node, you will see the previous scan results. When you click on a service, you will see the host on which the service was found:\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/77.jpg\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6192\" height=\"885\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/77.jpg\" width=\"724\" \/><\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tTo view summary information on a host, click on it and select the <strong>Host Details<\/strong> tab:\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/78.jpg\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6191\" height=\"886\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/78.jpg\" width=\"723\" \/><\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tIn the <strong>Topology<\/strong> tab, you will see information about the links between the scanned\/discovered hosts:\n<\/p>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/79.jpg\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6190\" height=\"887\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/79.jpg\" width=\"792\" srcset=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/79.jpg 792w, https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/79-768x860.jpg 768w\" sizes=\"(max-width: 792px) 100vw, 792px\" \/><\/a>\n<\/p>\n<h2 style=\"text-align: justify;\">\n\tHow to change the Zenmap interface language<br \/>\n<\/h2>\n<p style=\"text-align: justify;\">\n\tZenmap interface has been translated into many languages. If there is a translation for the language of your OS, then the program will automatically show the interface in your language.\n<\/p>\n<p style=\"text-align: justify;\">\n\tAt the same time, Zenmap lacks options for switching the interface language, therefore, for example, if you do not like the translation, you cannot select another language in the settings, for example, English.\n<\/p>\n<p style=\"text-align: justify;\">\n\tThe easiest method to make inscriptions in Zenmap in English is to delete the language folder, for example, to disable Russian localization, you need to delete the <strong>C:\\Program Files (x86)\\Nmap\\share\\zenmap\\locale\\ru\\<\/strong> folder.\n<\/p>\n<p style=\"text-align: justify;\">\n\tA slightly more complex method for those who like to tinker with the terminal, it is about setting a new environment variable. The official instructions suggest doing this at the system-wide level, but this is not necessary.\n<\/p>\n<p style=\"text-align: justify;\">\n\tOpen PowerShell (<strong>Win+x &rarr; Windows PowerShell<\/strong>) and enter two commands:\n<\/p>\n<pre class=\"brush:bash;\">\r\n$Env:LANG=&#39;C&#39;\r\nStart-Process &quot;C:\\Program Files (x86)\\Nmap\\zenmap.exe&quot;<\/pre>\n<p style=\"text-align: justify;\">\n\tIn order not to remember the commands every time, create a <strong>Zenmap-en.ps1<\/strong> file on your desktop and copy into it:\n<\/p>\n<pre class=\"brush:bash;\">\r\n$Env:LANG=&#39;C&#39;\r\nStart-Process &quot;C:\\Program Files (x86)\\Nmap\\zenmap.exe&quot;<\/pre>\n<p style=\"text-align: justify;\">\n\tSave and close.\n<\/p>\n<p style=\"text-align: justify;\">\n\tTo run, right-click and select <strong>Run with PowerShell<\/strong>.\n<\/p>\n<p style=\"text-align: justify;\">\n\tAnd finally, if you want to change a variable at the system-wide level (as shown in the <a href=\"https:\/\/nmap.org\/book\/zenmap-lang.html\" rel=\"noopener\" target=\"_blank\">official instructions<\/a>), then the name of the variable must be &ldquo;<strong>LANG<\/strong>&rdquo;, and its value (for English) must be &ldquo;<strong>C<\/strong>&rdquo;. If there are other applications in the system that respect the value of the LANG variable, this will affect them as well.\n<\/p>\n<h2 style=\"text-align: justify;\">\n\tUsing Nmap on Windows from the command line<br \/>\n<\/h2>\n<p style=\"text-align: justify;\">\n\tIf you need a console version of Nmap, you can use it on Windows just like you do on Linux. When Nmap is installed, it adds the path to the Nmap executable to the environment variables, so you just need to specify the program name on the command line:\n<\/p>\n<pre class=\"brush:bash;\" style=\"text-align: justify;\">\r\nnmap -h<\/pre>\n<p style=\"text-align: justify;\">\n\t<a href=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/710.jpg\"><img loading=\"lazy\" decoding=\"async\" alt=\"\" class=\"alignnone size-full wp-image-6189\" height=\"502\" src=\"https:\/\/miloserdov.org\/wp-content\/uploads\/2021\/05\/710.jpg\" width=\"683\" \/><\/a>\n<\/p>\n<p style=\"text-align: justify;\">\n\tIf you did not use the installer, but downloaded the zip archive, then it lacks a graphical interface. You also need to install <a href=\"https:\/\/nmap.org\/npcap\/\" rel=\"noopener\" target=\"_blank\">Npcap<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=40784\" rel=\"noopener\" target=\"_blank\">Microsoft Visual C++ 2013 Redistributable Package yourself<\/a>.\n<\/p>\n<h2 style=\"text-align: justify;\">\n\tConclusion<br \/>\n<\/h2>\n<p style=\"text-align: justify;\">\n\tNmap allows Windows to scan computers and other devices for open ports. It is also able to determine the services running on the remote host, their version.\n<\/p>\n<p style=\"text-align: justify;\">\n\tThe graphical interface allows you to simplify the use of the program, but it is recommended that you familiarize yourself with <a href=\"https:\/\/en.kali.tools\/?p=1433\" target=\"_blank\" rel=\"noopener\">all the program options<\/a> to gain skills in various scanning techniques.\n<\/p>\n<p style=\"text-align: justify;\">\n\tIn addition to their main functions &ndash; scanning ports and determining the versions of installed software &ndash; Nmap scripts allow you to perform various other tasks, including checking for vulnerabilities, weak passwords, and collecting information.<\/p>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>If you need to scan ports of computers and devices on a local network or on the Internet from Windows, then one of the best options is a combination of Nmap and Zenmap (a graphical interface for Nmap). Nmap has a large number of scanning options, and Zenmap&#39;s graphical interface<a href=\"https:\/\/miloserdov.org\/?p=6188\" class=\"read-more\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":6190,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[52,197,33,348,98,16,181,709],"class_list":["post-6188","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-gathering","tag-infogathering","tag-network-scanning","tag-nmap","tag-ports","tag-portscanning","tag-windows","tag-windows-command-line","tag-zenmap"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/miloserdov.org\/index.php?rest_route=\/wp\/v2\/posts\/6188"}],"collection":[{"href":"https:\/\/miloserdov.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/miloserdov.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/miloserdov.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/miloserdov.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6188"}],"version-history":[{"count":5,"href":"https:\/\/miloserdov.org\/index.php?rest_route=\/wp\/v2\/posts\/6188\/revisions"}],"predecessor-version":[{"id":6223,"href":"https:\/\/miloserdov.org\/index.php?rest_route=\/wp\/v2\/posts\/6188\/revisions\/6223"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/miloserdov.org\/index.php?rest_route=\/wp\/v2\/media\/6190"}],"wp:attachment":[{"href":"https:\/\/miloserdov.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6188"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/miloserdov.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6188"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/miloserdov.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6188"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}