NMAP port scanning tool

please use this tool as a security tool only

---

Closed Caption:

ok this video is intended for my CIS 160
classic cochise college it's an
introduction to information systems
class but i understand that this being
on YouTube a lot of other people see it
and that's fine now on our blackboard
site I've got a list of security tools
and one of them is our port scanning
tool called nmap so if you click on that
and downloaded to download pretty
quickly because it's a zip file it will
open and you'll have a folder with three
different things you have an
instructions document and that should be
pretty helpful and then you'll have
winpcap which is a program that in map
needs to run you'll want to install
winpcap first it's pretty
straightforward i'm not going to do it
in the video but double-click it go
through the wizard and you'll have to
restart the computer okay now in the end
map folder you've got all the files that
you need to make nmap work now what i've
done here is i've copied it to my hard
drive okay and to make navigating to it
easy
I've relate i've renamed it ok so i
called it nmap and then i've called it
nmap again and you'll see why ok now to
use nmap our port scanning tool go to
start run and i'll type in CMD navigate
to the c drive c colon typing CD and map
change directory
I'll change directory again and map and
all type in and map and then the domain
name
okay can be whatever you want i'll use
one of my domain names FYI FTR dot-com a
press enter now I'll actually go ahead
and pause the video here if it takes
longer than about 30 seconds but what
it's doing is it's actually scanning
that website to determine what parts are
open and what ports are closed so it's a
very powerful security tool now on that
note it can be used for bad things right
it's not an injector you can inject any
malicious code it's just a port scanner
so it's determining what ports are open
and what parts are closed now first
network network security administrators
that's a valuable thing it's going to
tell us where our holes are in our
network for a hacker someone you know
who has a more malicious intent
it's going to tell them what holes are
open and in this case the FYI ft.com you
know it's basically filtering out a lot
of ports but it's telling me for example
that port 80 is open that services HTTP
alright so web traffic tcp port is 21 is
ftp traffic is also open ftp data is
closed right so this is some very
valuable information I don't know if I'm
gonna get into any trouble for doing
this but I'm going to try to nmap one of
the bigger sites maybe something like
cnn.com ok it's going to take a little
while it's all pause the video until
this is done
ok it's unpause the video has been on
pause and it's basically on not giving
us a whole lot which is good I mean CNN
it looks like CNN is doing a great job
in terms of security port 443 is closed
port 80 is open right so i encourage you
to try this tool but you know in theory
you should always have the the
permission of the website you're doing
it too but ultimately it's not that that
big a deal it's not that intrusive of a
tool might be the equivalent of sending
a couple of ping packets to a web site
okay but very be very careful about the
way you use this tool can be used for
good and it can be used for bad but
ultimately it's just scanning ports to
see which ports are open and close