> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/reconnaissance/active-reconnaissance-approach/nmap/introduction.md).

# Introduction

Nmap, short for **Network Mapper**, is a powerful, free, and open-source tool used for network scanning. It is utilized to identify hosts and services on a computer network and detect security vulnerabilities.

The Nmap scanning process consists of several key steps, including:

1. **Target Specification** – Defining the hosts or network ranges to scan.
2. **Host Discovery** – Identifying active hosts on the network.
3. **Port Specification and Scan Order** – Selecting specific ports or scanning all available ports.
4. **Service Version Detection** – Determining the versions of services running on open ports.
5. **Script Scanning** – Using the Nmap Scripting Engine (NSE) to detect vulnerabilities and gather additional information.
6. **Operating System (OS) Detection** – Identifying the operating system of target hosts.
7. **Output Management** – Saving scan results in different formats for analysis and reporting.