> For the complete documentation index, see [llms.txt](https://red.marcbruce.com/untitled/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.marcbruce.com/untitled/pentesting-notes.md).

# NMAP

### Scan top 1000 ports for vulnerabilities with TCP SYN

nmap -sV -vv --script=vuln --top-ports 1000 \[IP ADDRESS]

### Scan specific ports

nmap -p 80,443 \[IP ADDRESS]

### Scan all ports (0 - 65535)

nmap -p- \[IP ADDRESS]