Part 1

Use NMAP tool to scan several web sites. Some big companies sites may not get many information, some small organizations sites may have more information.

(Do not scan any government or military site, dangerous!!!)

Answer the following questions

You choose at least 4 sites (2 big and 2 small organizations, for example, schools or bakery stores or high-school sportclubs or flower stores or church, etc) to scan:

Attach screen shots for your results.

You should install Zenmap for the GUI interface.

1. Try all scan options (listed in 3.2 above), then list all services running on each host as the format below:

Protocol: (TCP or UDP), port #, brief service description.

____________________ ________ _________________________

List the commands used. Include some screen shoot.

2. Is Nmap able to identify the operating system running on each system? What is the version of OS? Do some research, is this version out of date? If yes, what are the well-known vulnerabilities?

References:

1. Scanning and Defending Networks with Nmap By Rich Jankowski 6/26/2002 http://www.linuxsecurity.com/feature_stories/feature_story-4.html

2. Tools of the Trade: nmap By Josh Flechtner

http://www.linuxgazette.com/issue56/flechtner.html

3. Manual of NMAP

http://www.insecure.org/nmap/data/nmap_manpage.html