Nmap Useful Switches

Handy Nmap switches for OSCP-style scans: -sn sweep, -sS SYN, -Pn no ping, -p- all ports, -sV versions, -A aggressive.

Quick reference for the Nmap flags used most often during enumeration.

Switches

• -sn → Ping sweep (host discovery only)
• -sS → TCP SYN scan
• -Pn → Disable host discovery (treat host as up)
• -p- → Scan all 65535 ports
• -sV → Service/version detection
• -A → OS detect + scripts + traceroute
• -O → OS detection
• -T4 → Faster timing template
• -sC → Run default scripts