Habilidades nmap
📦
nmap
Revisão do conteúdo r2 Risco alto ⚙️ Comandos externos🌐 Acesso à rede📁 Acesso ao sistema de arquivos
Executar Reconhecimento Autorizado com Nmap
Varreduras manuais de rede podem deixar portas passar despercebidas e produzir evidências desorganizadas. Esta skill orienta varreduras autorizadas com Nmap, organização de saídas e resumos de serviços.
Suporta: Claude Codex Code(CC)
Pare e solicite confirmação antes de instalar.
Revise o plano e obtenha o consentimento explícito do usuário antes de alterar arquivos.
Instalar com meu Agente
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Solicitação do agente
Review the Skillstore skill "nmap" from https://skillstore.io/skills/brownfinesecurity-nmap.md and its manifest at https://skillstore.io/api/skills/brownfinesecurity-nmap/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Recursos legíveis por agentes
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Testar
Usando "nmap". Planeje uma varredura para um servidor web interno aprovado.
Resultado esperado:
Um plano de varredura passo a passo com confirmação de escopo, diretório de saída, descoberta de portas, detecção de serviços e uma checklist final de resumo.
Usando "nmap". Resuma estes resultados Nmap para um dispositivo de câmera gerenciado.
Resultado esperado:
Um relatório conciso listando portas abertas, serviços detectados, possíveis funções do dispositivo, scripts relevantes e itens de validação de acompanhamento.
Usando "nmap". Ajude-me a escolher um tipo de varredura para uma sub-rede de produção sensível.
Resultado esperado:
Uma recomendação cautelosa que favorece escopo limitado, temporização mais lenta, aprovação documentada e condições claras de interrupção.
Auditoria de segurança
Risco altov10 • 23/07/2026 Abrir o relatório versionado
The skill contains actionable Nmap commands for privileged, broad, stealth, vulnerability, protocol, and brute-force scans. Markdown, hard-link, and private-address alerts are false positives, but confirmed scan guidance creates substantial dual-use risk. Authorization is advisory, while evasion techniques and automatic privileged scanning remain operational instructions.
1
Arquivos analisados
533
Linhas analisadas
13
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (50)
Alto
System reconnaissance
Use when trying to avoid detection (requires root/sudo):
The text explicitly recommends a root SYN scan when trying to avoid detection. This is actionable covert-reconnaissance guidance rather than neutral system inventory.
Alto
Network scanning tools
description: Professional network reconnaissance and port scanning using nmap. Supports various scan
The metadata explicitly advertises port scanning, service enumeration, vulnerability scanning, and reconnaissance. This accurately identifies the skill's active dual-use capability.
Alto
Network scanning tools
You are helping the user perform professional network reconnaissance and port scanning using nmap. T
The instruction explicitly directs the agent to help perform Nmap reconnaissance and port scanning. This confirms active network-scanning intent.
Alto
Network scanning tools
sudo nmap -p- <target> -oA <output-dir>/nmap-portscan
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- -Pn <target> -oA <output-dir>/nmap-portscan
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p <OPEN_PORT_LIST> -sV -sC <target> -oA <output-dir>/nmap-services
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- <target> -oA "$OUTPUT_DIR/nmap-portscan"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- -Pn <target> -oA "$OUTPUT_DIR/nmap-portscan"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Mostrar todos os 50 problemas confirmados
Alto
Network scanning tools
nmap -p "$OPEN_PORTS" -sV -sC <target> -oA "$OUTPUT_DIR/nmap-services"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV -sC <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV -sC -p- <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -sS -sV -sC <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -sU --top-ports 100 <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -A -T4 <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV --script vuln <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -O <target> -oA <output-prefix>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 80,443,8080,8443 --script http-* <target> -oA <output-dir>/nmap-web
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 22 --script ssh-* <target> -oA <output-dir>/nmap-ssh
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 554 --script rtsp-* <target> -oA <output-dir>/nmap-rtsp
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 80,554,8000,8080 --script http-methods,http-headers <target> -oA <output-dir>/nmap-onvif
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap <ip-address>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap 192.168.1.0/24
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap 192.168.1.1-254
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap 192.168.1.1 192.168.1.10 192.168.1.100
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap 192.168.1.0/24 --exclude 192.168.1.1,192.168.1.254
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script auth <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script brute <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sC <target> # equivalent to --script default
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script discovery <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script vuln <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap --script "http-*" <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 554 --script rtsp-methods,rtsp-url-brute <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 1900 --script upnp-info <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 1883,8883 --script mqtt-subscribe <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 502 --script modbus-discover <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p <ports> -sV -sC <target> -oA output/nmap-services
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV -sC -T4 <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV -sC -T2 <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap <options> <target>
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- $TARGET -oA "$OUTPUT_DIR/nmap-portscan"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -p- -Pn $TARGET -oA "$OUTPUT_DIR/nmap-portscan"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p "$OPEN_PORTS" -sV -sC $TARGET -oA "$OUTPUT_DIR/nmap-services"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 80 --script http-methods $TARGET -oA "$OUTPUT_DIR/nmap-http"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -p 554 --script rtsp-methods $TARGET -oA "$OUTPUT_DIR/nmap-rtsp"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -sU --top-ports 100 <target> -oA "$OUTPUT_DIR/nmap-udp"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
sudo nmap -O <target> -oA "$OUTPUT_DIR/nmap-os"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network scanning tools
nmap -sV --script vuln <target> -oA "$OUTPUT_DIR/nmap-vuln"
The cited line provides an actionable Nmap scan command. Executing it against an unapproved target performs active reconnaissance and may disrupt services or violate scope.
Alto
Network Scan Evasion Guidance
The skill recommends stealth scans, IDS-evasion timing, packet fragmentation, and trusted source ports. These techniques can facilitate covert reconnaissance.
The cited sections explicitly describe avoiding detection, IDS evasion, fragmented packets, and trusted source ports. The intent is direct and repeated.
Alto
Brute-Force and Endpoint Discovery Guidance
The skill recommends Nmap brute-force scripts and RTSP URL brute forcing. These actions can test credentials or enumerate protected endpoints.
The commands explicitly select the brute NSE category and rtsp-url-brute script. Their names and surrounding labels establish the intended behavior.
Alto
Privileged Broad Scanning Before Authorization
The default workflow mandates a privileged all-port scan and automatic firewall-bypass retry. Authorization appears only as a later question, not an execution gate.
The skill says to always use the privileged two-phase workflow, while authorization is only listed among questions near the end. No mandatory verification gate is defined.
Itens de revisão de capacidade (13)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Alto
sudo privilege escalation
sudo nmap -p- <target> -oA <output-dir>/nmap-portscan
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- -Pn <target> -oA <output-dir>/nmap-portscan
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- <target> -oA "$OUTPUT_DIR/nmap-portscan"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- -Pn <target> -oA "$OUTPUT_DIR/nmap-portscan"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -sS -sV -sC <target> -oA <output-prefix>
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -sU --top-ports 100 <target> -oA <output-prefix>
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -O <target> -oA <output-prefix>
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
# Run with sudo
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap <options> <target>
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- $TARGET -oA "$OUTPUT_DIR/nmap-portscan"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -p- -Pn $TARGET -oA "$OUTPUT_DIR/nmap-portscan"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -sU --top-ports 100 <target> -oA "$OUTPUT_DIR/nmap-udp"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Alto
sudo privilege escalation
sudo nmap -O <target> -oA "$OUTPUT_DIR/nmap-os"
The skill instructs the agent to run Nmap through sudo, granting raw-packet and root capabilities for active scanning. This increases impact and crosses a privilege boundary.
Fatores de risco
⚙️ Comandos externos (50)
SKILL.md:13-21 SKILL.md:21-23 SKILL.md:23-30 SKILL.md:30-32 SKILL.md:32-40 SKILL.md:40-42 SKILL.md:42-43 SKILL.md:43-48 SKILL.md:48-50 SKILL.md:50-51 SKILL.md:51 SKILL.md:52-53 SKILL.md:53-66 SKILL.md:66-69 SKILL.md:69-71 SKILL.md:71-72 SKILL.md:72-74 SKILL.md:74-81 SKILL.md:81-84 SKILL.md:84-87 SKILL.md:87-89 SKILL.md:89-92 SKILL.md:92-97 SKILL.md:97-100 SKILL.md:100-102 SKILL.md:102-105 SKILL.md:105-111 SKILL.md:111-114 SKILL.md:114-116 SKILL.md:116-122 SKILL.md:122-124 SKILL.md:124-125 SKILL.md:125-126 SKILL.md:126-127 SKILL.md:127-134 SKILL.md:134-136 SKILL.md:136-137 SKILL.md:137-143 SKILL.md:143-145 SKILL.md:145-146 SKILL.md:146-152 SKILL.md:152-154 SKILL.md:154-155 SKILL.md:155-156 SKILL.md:156-162 SKILL.md:162-164 SKILL.md:164-165 SKILL.md:165-166 SKILL.md:166-172 SKILL.md:172-174
🌐 Acesso à rede (6)
📁 Acesso ao sistema de arquivos (3)
Padrões detectados
System reconnaissanceNetwork scanning tools×46
Auditado por: codex Ver histórico de auditoria →
Compartilhar e citar este relatório
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
Copiar link do relatório
https://skillstore.io/skills/brownfinesecurity-nmap/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/brownfinesecurity-nmap?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/brownfinesecurity-nmap?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/brownfinesecurity-nmap/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Cartão incorporável
<iframe src="https://skillstore.io/embed/skills/brownfinesecurity-nmap.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citações acadêmicas (APA · BibTeX · CFF)
Citação APA
BrownFineSecurity. (2026). nmap security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/brownfinesecurity-nmap/audits/10Citação BibTeX
@techreport{brownfinesecurity-brownfinesecurity-nmap-2026,
author = {BrownFineSecurity},
title = {nmap security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/brownfinesecurity-nmap/audits/10},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nmap security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
- name: "BrownFineSecurity"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/brownfinesecurity-nmap/audits/10"
identifiers:
- type: other
value: "skillstore:brownfinesecurity-nmap:audit:10"
description: "Skillstore immutable audit report identifier"
Pontuação do Skillstore
Por que esta pontuação Confiança das evidências: Médio 55
Arquitetura
85
Manutenibilidade
87
Conteúdo
71
Comunidade
87
Conformidade com a especificação
O que você pode criar
Mapear um Ativo Autorizado
Planeje e documente uma varredura Nmap com escopo definido para um único host ou sub-rede aprovada.
Inventariar Serviços Internos
Identifique portas abertas e versões de serviços em sistemas internos gerenciados.
Revisar Exposição de IoT
Verifique dispositivos IoT aprovados em busca de serviços web, RTSP, MQTT e de gerenciamento expostos.
Teste estes prompts
Iniciar um Plano de Varredura Seguro
Ajude-me a planejar uma varredura Nmap autorizada para um host. Primeiro, peça-me o alvo, escopo, limites de horário e local de saída.
Executar Enumeração de Serviços
Tenho autorização para este alvo. Oriente-me pela detecção de serviços nestas portas abertas e explique cada opção antes da execução.
Analisar Resultados Salvos
Revise meus resultados Nmap salvos, resuma portas abertas e versões, e identifique achados que precisam de validação manual.
Criar um Fluxo de Teste com Escopo Definido
Crie um fluxo de trabalho Nmap com escopo definido para uma avaliação IoT autorizada, incluindo temporização segura, nomenclatura de saídas e verificações de acompanhamento por tipo de serviço.
Boas práticas
- Confirme a autorização por escrito e o escopo do alvo antes de qualquer varredura.
- Salve as saídas de forma consistente para que os achados possam ser revisados e reproduzidos.
- Use temporização conservadora em redes de produção ou frágeis.
Evitar
- Escanear sistemas públicos ou de terceiros sem permissão explícita.
- Executar varreduras amplas com sudo antes de confirmar o escopo e os limites de impacto.
- Tratar a saída de vulnerabilidades NSE como prova sem validação manual.
Perguntas frequentes
Esta skill executa varreduras por conta própria?
Ela fornece orientação e comandos. A execução depende do ambiente do agente e da aprovação do usuário.
A autorização é obrigatória?
Sim. Você deve confirmar a autorização e o escopo do alvo antes de executar qualquer varredura.
Quais ferramentas são necessárias?
O Nmap deve estar instalado. Alguns tipos de varredura também exigem privilégios elevados.
Ela pode escanear serviços UDP?
Sim. Ela inclui orientação para varredura UDP, mas varreduras UDP são mais lentas e precisam de escopo cuidadoso.
Ela pode interpretar a saída da varredura?
Sim. Ela pode ajudar a resumir portas abertas, versões de serviços, scripts e perguntas de acompanhamento.
É segura para redes de produção?
Somente com escopo aprovado, temporização conservadora, ciência do monitoramento e condições claras de interrupção.
Detalhes do desenvolvedor
Autor
BrownFineSecurityLicença
MIT
Revisão da Skillstore
r2
Aviso de versão
O autor não declarou uma versão.
Referência
a39a91716eadede5f4cdefd78178fed4e837a128
Atualidade da manutenção
26/07/2026
Uso
7 downloads · 243 visualizações
Estrutura de arquivos
📄 SKILL.md