Uly.me

cloud engineer

nmap

Checking What SSL and TLS Are In Use

Here’s another command to check what version of SSL and TLS is being used.

nmap --script ssl-enum-ciphers -p 443 server.domain.com

Result

PORT    STATE SERVICE
443/tcp open  https
| ssl-enum-ciphers: 
|   TLSv1.2: 
|     ciphers:
...

In this example, only TLSv1.2 is in use. For security purposes, use TLSv1.2 or higher.

Nmap Scan Top 1000 Ports

Use this option if you want to scan the top 1000 ports.

$ nmap -F 10.10.10.10

If you want a single specific port, then use -p option.

$ nmap -p 80 10.10.10.10

Check Open Ports Remotely

Here are a few tools to check if ports are open from a remote host.

nc -zvw10 192.168.0.1 22
nmap 192.168.0.1 -p 22
telnet 192.168.0.1 22

You may have to install netcat and nmap if missing in your distro.

yum install nc
yum install nmap