Nmap

Find every live host on a subnet with a bash one-liner, and when to reach for nmap -sn instead. Why a down result never means the address is free.

A scan you cannot reproduce is a story, not evidence. The moment an Nmap result matters - a firewall change you

Timing is the lever that decides whether an Nmap scan finishes before your coffee gets cold or runs so slowly

Nmap ships a whole family of options with names like fragmentation, decoys, and source-port spoofing, and it is easy

By the time you have found an open port and identified the service behind it, you have answered "what

Most people scan TCP, get their results in seconds, and stop there. But a huge amount of what runs on