> For the complete documentation index, see [llms.txt](https://sgtdiddlywink.gitbook.io/thm/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sgtdiddlywink.gitbook.io/thm/machines/easy-machines/pickle-rick/scouting/nmap.md).

# NMAP

* Even though this is a web penetration test, I will go ahead and check nmap anyways to see what pops up. If anything for good practice.
* Start with basic nmap scan:

  * `nmap 10.10.72.153`
  *

  ```
  <figure><img src="/files/f4x4wmpnik0YY9Ux36Ee" alt=""><figcaption></figcaption></figure>
  ```

  * Looks like the following ports are open:
    * 22
    * 80
  * Will check for all open ports
* Next run an nmap scan on all ports to see what is open:

  * `nmap -p- 10.10.72.153`
  *

  ```
  <figure><img src="/files/bttHZ5mrew7x6CM1IcXp" alt=""><figcaption></figcaption></figure>
  ```

  * Nothing new.
* Run a more detailed scan to see what pops up:

  * `nmap -sC -sV -p 80,22 10.10.72.153`
  *

  ```
  <figure><img src="/files/s5IMTDl0no1VIfxTwv1S" alt=""><figcaption></figcaption></figure>
  ```

  *