Network discovery

netdiscover
​netdiscover(8) - active/passive ARP reconnaissance tool
netdiscover -i eth0
netdiscover -r <ip>/24
nmap
nmap -sn <ip>/24
bash
for i in {1..255}; do (ping -c 1 xxx.xxx.xxx.${i} | grep "bytes from" &); done
powershell
$ping = New-Object System.Net.Networkinformation.Ping
1..254 | % { $ping.send("xxx.xxx.xxx.$_") | select address, status }

Reconnaissance - Previous

OSINT

Next - Enumeration

Port scanning

Last modified 9mo ago