Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I want to learn nmap and its various options. Are there any example domains which purposefully have security holes to facilitate learning nmap?

share|improve this question
    
U could nmap localhost first.... –  F. Hauri Mar 2 '13 at 17:53

3 Answers 3

up vote 9 down vote accepted

There is a specific URL for that : scanme.nmap.org

Hello, and welcome to Scanme.Nmap.Org, a service provided by the Nmap Security Scanner Project and Insecure.Org.

We set up this machine to help folks learn about Nmap and also to test and make sure that their Nmap installation (or Internet connection) is working properly. You are authorized to scan this machine with Nmap or other port scanners. Try not to hammer on the server too hard. A few scans in a day is fine, but dont scan 100 times a day or use this site to test your ssh brute-force password cracking tool.

Thanks -Fyodor

If you are looking for vulnerable webapp here are some good lists :

share|improve this answer

nmap won't disclose security holes, nmap will only disclose what services are running.

I'd highly recommend downloading virtualbox then getting an vunerable webserver like metasploitable to run on it. That way you can scan until your hearts content and also futher research what exploits etc are possible.

share|improve this answer
2  
With Nmap scripting engine and scripts you can detect and exploit vulnerabilities. –  Cristian Dobre Mar 2 '13 at 11:08

Take a look at Metasploitable (http://www.offensive-security.com/metasploit-unleashed/Metasploitable)

It is a Virtual machine that has a whole bunch of vulnerable services installed. There is a tutorial that walk through how to exploit each service, part of this will be using NMAP to fingerprint the services.

share|improve this answer
    
That's what I'm doing right now! :) –  TheRookierLearner Mar 4 '13 at 15:44

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.