「-A」が全部表示でとりあえずつけておけばいいみたい
yuta@DESKTOP-V36210S:/mnt/c$ nmap -A vamdemicsystem.black Starting Nmap 7.60 ( https://nmap.org ) at 2020-06-07 12:31 JST Nmap scan report for vamdemicsystem.black (183.181.88.32) Host is up (0.016s latency). rDNS record for 183.181.88.32: sv8031.xserver.jp Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD or KnFTPD | ssl-cert: Subject: commonName=*.xserver.jp | Subject Alternative Name: DNS:*.xserver.jp, DNS:xserver.jp | Not valid before: 2018-12-12T00:00:00 |_Not valid after: 2021-03-15T23:59:59 |_ssl-date: TLS randomness does not represent time 80/tcp open http nginx |_http-server-header: nginx |_http-title: Did not follow redirect to https://vamdemicsystem.black/ 110/tcp open pop3 Courier pop3d |_pop3-capabilities: LOGIN-DELAY(10) IMPLEMENTATION(Courier Mail Server) UIDL USER PIPELINING TOP STLS | ssl-cert: Subject: commonName=*.xserver.jp | Subject Alternative Name: DNS:*.xserver.jp, DNS:xserver.jp | Not valid before: 2018-12-12T00:00:00 |_Not valid after: 2021-03-15T23:59:59 |_ssl-date: TLS randomness does not represent time 143/tcp open imap Courier Imapd (released 2016) |_imap-capabilities: completed IDLE STARTTLSA0001 UIDPLUS THREAD=REFERENCES ACL NAMESPACE CHILDREN IMAP4rev1 SORT ACL2=UNION QUOTA CAPABILITY THREAD=ORDEREDSUBJECT OK | ssl-cert: Subject: commonName=*.xserver.jp | Subject Alternative Name: DNS:*.xserver.jp, DNS:xserver.jp | Not valid before: 2018-12-12T00:00:00 |_Not valid after: 2021-03-15T23:59:59 |_ssl-date: TLS randomness does not represent time 443/tcp open ssl/http nginx |_http-generator: WordPress 5.2.6 | http-robots.txt: 1 disallowed entry |_/wp-admin/ |_http-server-header: nginx |_http-title: \xE6\xA0\xAA\xE5\xBC\x8F\xE4\xBC\x9A\xE7\xA4\xBE\xE3\x83\xB4\xE3\x82\xA1\xE3\x83\xB3\xE3\x83\x87\xE3\x83\x9F\xE3\x83\x83\xE3\x82\xAF\xE3\x82\xB7\xE3\x82\xB9\xE3\x83\x86\xE3\x83\xA0 | | ssl-cert: Subject: commonName=www.vamdemicsystem.black | Subject Alternative Name: DNS:vamdemicsystem.black, DNS:www.vamdemicsystem.black | Not valid before: 2020-05-22T01:12:23 |_Not valid after: 2020-08-20T01:12:23 |_ssl-date: TLS randomness does not represent time | tls-nextprotoneg: | h2 |_ http/1.1 465/tcp open ssl/smtp Postfix smtpd |_smtp-commands: sv8031.xserver.jp, PIPELINING, SIZE 102400000, VRFY, ETRN, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN, | ssl-cert: Subject: commonName=*.xserver.jp | Subject Alternative Name: DNS:*.xserver.jp, DNS:xserver.jp | Not valid before: 2018-12-12T00:00:00 |_Not valid after: 2021-03-15T23:59:59 |_ssl-date: TLS randomness does not represent time 587/tcp open smtp Postfix smtpd |_smtp-commands: sv8031.xserver.jp, PIPELINING, SIZE 102400000, VRFY, ETRN, STARTTLS, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN, | ssl-cert: Subject: commonName=*.xserver.jp | Subject Alternative Name: DNS:*.xserver.jp, DNS:xserver.jp | Not valid before: 2018-12-12T00:00:00 |_Not valid after: 2021-03-15T23:59:59 |_ssl-date: TLS randomness does not represent time 993/tcp open ssl/imap Courier Imapd (released 2016) |_imap-capabilities: AUTH=PLAIN IDLE UIDPLUS completed THREAD=REFERENCES ACL NAMESPACE CHILDREN IMAP4rev1 SORT ACL2=UNIONA0001 QUOTA CAPABILITY THREAD=ORDEREDSUBJECT OK | ssl-cert: Subject: commonName=*.xserver.jp | Subject Alternative Name: DNS:*.xserver.jp, DNS:xserver.jp | Not valid before: 2018-12-12T00:00:00 |_Not valid after: 2021-03-15T23:59:59 |_ssl-date: TLS randomness does not represent time 995/tcp open ssl/pop3 Courier pop3d |_pop3-capabilities: PIPELINING IMPLEMENTATION(Courier Mail Server) TOP UIDL USER LOGIN-DELAY(10) | ssl-cert: Subject: commonName=*.xserver.jp | Subject Alternative Name: DNS:*.xserver.jp, DNS:xserver.jp | Not valid before: 2018-12-12T00:00:00 |_Not valid after: 2021-03-15T23:59:59 |_ssl-date: TLS randomness does not represent time 60020/tcp closed unknown Service Info: Host: sv8031.xserver.jp; OS: Unix Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 30.13 seconds
「-sT」で空いているポートとプロトコルをチェック
yuta@DESKTOP-V36210S:/mnt/c$ nmap -sT vamdemicsystem.black Starting Nmap 7.60 ( https://nmap.org ) at 2020-06-07 12:37 JST Nmap scan report for vamdemicsystem.black (183.181.88.32) Host is up (0.016s latency). rDNS record for 183.181.88.32: sv8031.xserver.jp Not shown: 989 filtered ports PORT STATE SERVICE 20/tcp closed ftp-data 21/tcp open ftp 80/tcp open http 110/tcp open pop3 143/tcp open imap 443/tcp open https 465/tcp open smtps 587/tcp open submission 993/tcp open imaps 995/tcp open pop3s 60020/tcp closed unknown Nmap done: 1 IP address (1 host up) scanned in 4.42 seconds
「–source-port 1.1.1.1」で送信元IP偽装
yuta@DESKTOP-V36210S:/mnt/c$ nmap --source-port 1.1.1.1 vamdemicsystem.black WARNING: -g is incompatible with the default connect() scan (-sT). Use a raw scan such as -sS if you want to set the source port. Starting Nmap 7.60 ( https://nmap.org ) at 2020-06-07 12:40 JST Nmap scan report for vamdemicsystem.black (183.181.88.32) Host is up (0.017s latency). rDNS record for 183.181.88.32: sv8031.xserver.jp Not shown: 989 filtered ports PORT STATE SERVICE 20/tcp closed ftp-data 21/tcp open ftp 80/tcp open http 110/tcp open pop3 143/tcp open imap 443/tcp open https 465/tcp open smtps 587/tcp open submission 993/tcp open imaps 995/tcp open pop3s 60020/tcp closed unknown Nmap done: 1 IP address (1 host up) scanned in 4.38 seconds