Intro to Nmap

This challenge will teach us some basics about using the network port-scanning tool Nmap. Speak to Eric to the east of the Grand Hotel building to get some more info. To start the challenge click that really cool motorcycle. Enter "y" into the terminal to begin.

Task 1 is to run nmap with no options and scan the top 1000 ports of the IP 127.0.12.25.

elf@92ff5cb86e92:~$ nmap 127.0.12.25
Starting Nmap 7.80 ( https://nmap.org ) at 2026-01-01 10:23 UTC
Nmap scan report for 127.0.12.25
Host is up (0.000065s latency).
Not shown: 999 closed ports
PORT     STATE SERVICE
8080/tcp open  http-proxy

Nmap done: 1 IP address (1 host up) scanned in 0.15 seconds

Task 2 is to run a full port scan on 127.0.12.25. This means to scan ALL ports. To to this, use the "-p-" option.

elf@8ce588ddb2e9:~$ nmap -p- 127.0.12.25
Starting Nmap 7.80 ( https://nmap.org ) at 2026-01-01 10:32 UTC
Nmap scan report for 127.0.12.25
Host is up (0.000046s latency).
Not shown: 65534 closed ports
PORT      STATE SERVICE
24601/tcp open  unknown

Nmap done: 1 IP address (1 host up) scanned in 1.67 seconds

Task 3 is to scan the IP address range 127.0.12.20 - 127.0.12.28 and see which has a port open. To do this, just specify the start address then use a hyphen to specify the end.

elf@8ce588ddb2e9:~$ nmap 127.0.12.20-Starting Nmap 7.80 ( https://nmap.org ) at 2026-01-01 10:35 UTC
Nmap scan report for 127.0.12.20
Host is up (0.00018s latency).
All 1000 scanned ports on 127.0.12.20 are closed

Nmap scan report for 127.0.12.21
Host is up (0.00019s latency).
All 1000 scanned ports on 127.0.12.21 are closed

Nmap scan report for 127.0.12.22
Host is up (0.00018s latency).
All 1000 scanned ports on 127.0.12.22 are closed

Nmap scan report for 127.0.12.23
Host is up (0.00017s latency).
All 1000 scanned ports on 127.0.12.23 are closed

Nmap scan report for 127.0.12.24
Host is up (0.00019s latency).
All 1000 scanned ports on 127.0.12.24 are closed

Nmap scan report for 127.0.12.25
Host is up (0.00019s latency).
Not shown: 999 closed ports
PORT     STATE SERVICE
8080/tcp open  http-proxy

Nmap scan report for 127.0.12.26
Host is up (0.00017s latency).
All 1000 scanned ports on 127.0.12.26 are closed

Nmap scan report for 127.0.12.27
Host is up (0.00016s latency).
All 1000 scanned ports on 127.0.12.27 are closed

Nmap scan report for 127.0.12.28
Host is up (0.00017s latency).
All 1000 scanned ports on 127.0.12.28 are closed

Nmap done: 9 IP addresses (9 hosts up) scanned in 0.42 seconds

Task 4 is to run an nmap scan that identifies the service on 127.0.12.25 TCP port 8080. To do this, use the option "-sV" to enable service version detecting. You can also specify the specific port with the "-p" argument.

elf@8ce588ddb2e9:~$ nmap -sV -p 8080 127.0.12.25
Starting Nmap 7.80 ( https://nmap.org ) at 2026-01-01 10:40 UTC
Nmap scan report for 127.0.12.25
Host is up (0.000075s latency).

PORT     STATE SERVICE VERSION
8080/tcp open  http    SimpleHTTPServer 0.6 (Python 3.10.12)

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 6.77 seconds

Task 5 asks us to interact with the specific port using the ncat tool. It says to use the ncat tool to connect to TCP port 24601 on 127.0.12.25 and view the banner returned. To do this, just specify the ip or hostname followed by the port.

elf@8ce588ddb2e9:~$ ncat 127.0.12.25 24601
Welcome to the WarDriver 9000!
Terminated

You should get an indication that the challenge has been completed!