RE: Finding web servers with nmap

["Steve McLaughlin" <Steve.McLaughlin () aggreko co uk>]

Having port 80 open doesn't necessarily mean that a web server is
running on it.
A web server could be listening on port 88 or 980 for example.

If you just want to scan port 80 for web servers.
I would just use:

nmap -sS -sV -v -T5 -oN webservers.txt -p80 x.x.x.x/x

Where webservers.txt is the output file of the scan result.
You can use the -O option for OS fingerprinting too if you want more
detailed information, but it will take more time.

2c
Steve

-----Original Message-----
From: Denis [mailto:da_shestakov () myrealbox com] 
Sent: 30 November 2005 17:01
To: security-basics () securityfocus com
Subject: Finding web servers with nmap

Hi,

I have a task to "relatively quickly" find all web servers (all hosts
with open port 80) in some particular network. It seems it can be done
with the nmap program. Could you advice me concerning the best options
for running nmap to accomplish this task? In particular, does the
following command do it right?
nmap -v -sS -PS80 -PA80 -p 80 -oG my.log -iL x.x.0-255.0-255
I am asking that because I have a concern that the above command may
miss some hosts. However, it works faster than the command with "-P0
-p 80" ... 

-- 
BR,
  Denis


______________________________________________________________________

This email has been scanned by the MessageLabs Email Security System.
______________________________________________________________________

Visit us at http://www.aggreko.com

Confidentiality Notice:  This communication and any accompanying attachments contain confidential information intended 
for a specific individual and purpose.  This communication is private and protected by law.  If you are not the 
intended recipient, you are hereby respectfully notified that any disclosures, copying, forwarding or distribution, or 
the taking of any action based on the contents of this communication is strictly prohibited.

_____________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________