Nmap Cheatsheet

nmap -sV -sC -oN scan.txt <IP>       # Default scripts + version
nmap -p- --min-rate 5000 <IP>        # All ports fast
nmap -sU -top-ports 20 <IP>          # Top 20 UDP ports

nmap -sV --version-intensity 9 <IP>  # Max version detection
nmap -A <IP>                         # Aggressive (OS, version, scripts)

nmap --script vuln <IP>              # Run vuln scripts
nmap --script smb-enum-shares <IP>   # SMB enumeration
nmap --script http-enum <IP>         # HTTP enumeration

nmap -oN out.txt <IP>    # Normal
nmap -oX out.xml <IP>    # XML
nmap -oG out.gnmap <IP>  # Grepable
nmap -oA out <IP>        # All formats