RE: Finding web servers with nmap

["Burton Strauss" <Burton () FelisCatus org>]

Robin Keir (keir.net) has a free Windows program available, wotweb, which
does a simple scan for a range of IPs.  It's preloaded with checkboxes for
all the usual and many unusual web server ports.

-----Burton

-----Original Message-----
From: Denis [mailto:da_shestakov () myrealbox com] 
Sent: Wednesday, November 30, 2005 11:01 AM
To: security-basics () securityfocus com
Subject: Finding web servers with nmap

Hi,

I have a task to "relatively quickly" find all web servers (all hosts with
open port 80) in some particular network. It seems it can be done with the
nmap program. Could you advice me concerning the best options for running
nmap to accomplish this task? In particular, does the following command do
it right?
nmap -v -sS -PS80 -PA80 -p 80 -oG my.log -iL x.x.0-255.0-255 I am asking
that because I have a concern that the above command may miss some hosts.
However, it works faster than the command with "-P0 -p 80" ... 

--
BR,
  Denis