CFS275 · CHAPTER 4 · GUIDED TOOL PRACTICE

Nmap Discovery and Scanning Workbench

Investigate a small network, explain what each scan establishes, and save evidence in your training filesystem.

1. Type the command

2. Read the output

student@kali: ~/lab

Linux / Bash · Simulation
Terminal help and training environment

This page models a limited Bash shell and Nmap command set. All hosts, responses, files, and scan timing are simulated. No network packets leave your browser. Scan delays are shortened. Progress and files last until reset or reload.

help, nmap --help, pwd, ls, cd, mkdir, cat, history, and clear work here. Use cat scope.txt to read the client brief. The home directory is /home/student, and the starting directory is /home/student/lab.

Tab completes supported commands, Nmap options, training addresses, and existing paths at the end of the input. When several matches remain, Tab shows the choices and completes their shared beginning. Nothing runs until you press Enter. Command names and flags are case-sensitive.

All missions are available from the menu. Completed observations, command history, and files remain available when changing missions. Each mission guides you through its own steps and returns you to ~/lab when selected.

The target network is routed from the training workstation. Host discovery therefore does not use local Ethernet address discovery. Mission 4 includes a live host that drops the default discovery probes. A SYN scan uses synchronization packets to initiate a TCP exchange; TCP means Transmission Control Protocol. UDP means User Datagram Protocol.

How to interpret the evidence

Open: a service accepts connections or replies. Closed: a response indicates no listening service on that port. Filtered: filtering prevents a determination. Open|filtered: the responses cannot distinguish those two states.

Host discovery and port scanning answer different questions. A familiar port label is a conventional association. Version detection adds protocol evidence; a version string alone does not establish a vulnerability. Operating-system detection is an estimate. The simulator uses a fixed teaching profile for the default 1,000 TCP ports, including 22, 80, and 443 and excluding 65000.

References: host discovery, port states, version detection, operating-system detection, output files. These optional links require internet access.

Reset the workbench?

This clears all mission progress, command history, and simulated files.