Where are the scan results stored?

Results are automatically saved to a structured './nmap-output/' directory in normal, XML, and grepable formats for easy analysis and third-party tool integration.

Does this skill require root/sudo access?

Yes, certain high-performance scans like SYN stealth scans (-sS) and OS detection require sudo privileges to manipulate raw packets effectively.

What is the benefit of the two-phase scanning strategy?

It provides the best balance of speed and depth by quickly identifying all open ports first, then running detailed (and slower) service detection only on confirmed open ports.

Can I use this for IoT-specific devices?

Absolutely. This skill includes specialized NSE script guidance for protocols like RTSP, MQTT, and ONVIF commonly found in IoT hardware and IP cameras.

Nmap Network Reconnaissance

Name: Nmap Network Reconnaissance
Author: BrownFineSecurity

byBrownFineSecurity

•

494

安全与测试

Performs professional network reconnaissance and port scanning using an optimized two-phase strategy for comprehensive service detection.

关于

This skill equips Claude with professional-grade network auditing capabilities through Nmap. It implements a best-practice two-phase workflow: first conducting a rapid, full-range SYN port discovery followed by targeted service version detection and NSE script execution on identified open ports. Optimized for security professionals and developers, it ensures thorough coverage of all 65,535 ports while maintaining efficiency and organized output management across normal, XML, and grepable formats.

主要功能

Automated Service Version Fingerprinting and NSE Script Execution
Specialized IoT Protocol Discovery (RTSP, MQTT, ONVIF, Modbus)
Optimized Two-Phase Scanning (Discovery followed by Service Detection)
Structured Output Management (.nmap, .xml, .gnmap formats)
494 GitHub stars
Comprehensive 65,535 Port Coverage with SYN Stealth Scanning

使用场景

Professional network reconnaissance during penetration testing engagements
IoT device security auditing and vulnerability surface mapping
Verifying network firewall configurations and identifying exposed services

关于

主要功能

Automated Service Version Fingerprinting and NSE Script Execution
Specialized IoT Protocol Discovery (RTSP, MQTT, ONVIF, Modbus)
Optimized Two-Phase Scanning (Discovery followed by Service Detection)
Structured Output Management (.nmap, .xml, .gnmap formats)
494 GitHub stars
Comprehensive 65,535 Port Coverage with SYN Stealth Scanning

使用场景

Professional network reconnaissance during penetration testing engagements
IoT device security auditing and vulnerability surface mapping
Verifying network firewall configurations and identifying exposed services