NMAP 3.55 is out!!

[SirDice]

Freebsd users can find the new version in the ports collection.

cd /usr/ports/security/nmap && make all install clean

or if you have portupgrade installed:

portupgrade -R nmap

http://www.freshports.org/security/nmap/

[rajunpl]

I am using windows 2k, downloaded it but not sure how to use it

Can anyone enlighten me pls, thanks in advance

[SirDice]

Look in the tutorial section. There are a few excellent tutorials by TheHorse13.

[ComradeVlad]

What does NMAP actually do? And are there legal issues on downloading and using it?

[current]

What does NMAP actually do? And are there legal issues on downloading and using it?

Well, Nmap is an excellent open-source portscanner with a lot of features (like OS-Fingerprinting, etc.)

Downloading is definitly NOT illegal , using it maybe, according to what boxes you scan. You should only use it for your own, or on that ones you have the permission to scan.

Scanning foreign boxes may not be illegal in some countries, but i think thats a question for the profs here.

[ComradeVlad]

How would I scan my own system and check for vulnerabilities with Nmap?

[DjM]

NMAP is just a port scanner, it will show you what ports are open on your system. If you want to scan for vulnerabilities, you going to need a tool like Nessus. If you don't have access to a Linux environment, you can also get Nessus on the Knoppix-std ISO.

Cheers:

[SirDice]

AFAIK portscanning isn't illegal anywhere in the world.
Somebody correct me if i'm wrong please

[MrLinus]

IIRC, some states in the US had deemed it illegal at one point (perhaps the SuperDMCA?). AFAIK, it isn't. The judgement from 2000 seems to indicate that it's not but I don't recall any more cases that indicate otherwise.

That said however, some ISPs have made it against their AUP to do port scanning and you could lose your internet access. This law article might give some insights.

IMO, if the port scan does not cause a problem with the machine it's scanning (e.g., a DoS), then it is legal. Once it goes beyond a simple scan and causes a DoS or other problems then it's no longer legal. But that's just my opinion.