nmap Command Builder
Build an nmap command for a SYN, connect, UDP or ping scan, with port selection, service and OS detection, timing, NSE scripts and saved output.
Free · No sign-up · Your inputs stay in your browser
Input
Build an nmap command
Output
Command
61 characters
Only scan networks you own or have written permission to test: unauthorised scanning breaks most providers' terms and, in many countries, the law. -Pn helps when a firewall drops pings and hosts look down. --open hides closed and filtered ports so the output is what is actually reachable.
Runs in this browser. Nothing you paste is sent to a server.
About this tool
Method, assumptions, practical next steps, and limits.
Only scan what you own
Scanning networks without permission breaks most hosting providers' acceptable use policies and, in many jurisdictions, the law. Scan your own servers, or a target covered by a written engagement. The nmap reference guide documents every option.
Typical uses for ops
Confirming that a firewall change closed what it should (nmap -Pn -p 3306,6379 server from outside), finding forgotten services on a subnet, and checking TLS configuration with --script ssl-enum-ciphers -p 443. A SYN scan (-sS) needs root but is faster and quieter than a connect scan.