{
  "id": 16122439,
  "title": "Scanning for Open Ports and Vulnerabilities with Nmap",
  "url": "https://urgent.news/2026/10/22/scanning-for-open-ports-and-vulnerabilities-with-nmap",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-22T23:21:07.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/vultr/scanning-for-open-ports-and-vulnerabilities-with-nmap-2f9g"
  },
  "original_language": "en",
  "account": "Nmap (Network Mapper) is an open-source tool that discovers hosts, services, and potential security issues on a network. It helps system administrators and developers understand a server's network by identifying open ports, running services, and operating systems.\n\nTo begin, install Nmap on a Linux-based server as a non-root user with sudo privileges. The installation process varies depending on the operating system: for Debian/Ubuntu, use `sudo apt update && sudo apt install -y nmap`; for Rocky Linux and other RHEL-based systems, use `sudo dnf install -y nmap`. Verify the installation by running `nmap --version`.\n\nA basic port scan is the first step, checking the 1,000 most common ports. Run this command: `sudo nmap localhost`. The output indicates open ports like 22 (SSH), 3001 (Nessus), and 5432 (PostgreSQL). Scan for specific service versions with the `-sV` flag, and detect the operating system with the `-O` flag.\n\nThe Nmap Scripting Engine (NSE) enables vulnerability detection. Install a sample FTP server, vsftpd, and intentionally create a vulnerability by enabling anonymous login. Use the `ftp-anon` script from NSE on port 21 to detect the vulnerability. The output reveals that anonymous FTP login is allowed, indicating the vulnerability.\n\nTo mitigate this vulnerability, edit the vsftpd configuration file to set `anonymous_enable=YES` to `anonymous_enable=NO` and restart the service. Nmap provides a powerful framework for network discovery, service identification, and vulnerability assessment, enabling system administrators to maintain secure and well-maintained systems.",
  "summary": "Nmap (Network Mapper) is an open-source network discovery tool that identifies hosts, services, and potential security issues. It's an essential tool for system administrators and developers to map a server's network, letting you see which ports are open, what services are running, and what operating system a target system is using. This guide covers key security tasks with Nmap, including…",
  "key_points": [
    "Nmap is open-source tool for network discovery and vulnerability assessment",
    "Install Nmap on Linux server with sudo privileges using package manager",
    "Use Nmap's Scripting Engine to detect specific vulnerabilities like FTP anonymous login"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}