🖥️
Pentest Playbook
  • Pentest Playbook
  • Methodology
    • 🐘Pentest Methodology
  • Reconnaissance
    • 🦅Scanning and Enumeration
      • Host Discovery
      • Port Scan
  • Active Directory
    • 🐻Initial Attack Vectors
      • LLMNR Poisoning
      • SMB Relay
      • Gaining Shell Access
      • IPv6 Attack
    • 🐻‍❄️Post-Compromise Enumeration
      • LDAPDomainDump
      • BloodHound
      • PlumHound
      • PingCastle
    • 🐼Post-Compromise Attacks
      • CrackMapExec
      • SecretsDump
      • Kerberoasting
      • Token Impersonation
      • LNK File Attack
      • GPP or cPassword Attack
      • Mimikatz
  • Password Attacks
    • 🐱Hashcat
      • Hashcat for Windows
    • 🐠Hydra
    • 🐶John The Ripper
Powered by GitBook
On this page
  • Nmap
  • List Scan
  • Ping Scan / ICMP Scan
  • ARP Ping
  • ARP-Scan
  • Netdiscover
  1. Reconnaissance
  2. Scanning and Enumeration

Host Discovery

PreviousScanning and EnumerationNextPort Scan

Last updated 11 months ago

Nmap

List Scan

Syntax: sudo nmap -sL [Network/CIDR]

sudo nmap -sL 172.16.1.0/24

Ping Scan / ICMP Scan

Syntax: sudo nmap -sn [Network/CIDR]

# Ping Scan
sudo nmap -sn 172.16.1.0/24

# ICMP Scan
sudo nmap -sn -PE 172.16.1.0/24

ARP Ping

Syntax: sudo nmap -sn -PR [Network/CIDR]

sudo nmap -sn -PR 172.16.1.0/24

ARP-Scan

sudo arp-scan -l

Netdiscover

Syntax: sudo netdiscover -r [Network/CIDR]

sudo netdiscover -r 172.16.1.0/24
🦅
Nmap: Ping Scan / ICMP Scan
Nmap: ARP Ping
arp-scan
Netdiscover