Scanning Networks · Module 03

Zenmap

The official Nmap GUI — build, run and visualize scans.

ModuleModule 03PhaseScanning NetworksTypeDefensive / AnalysisPlatformKali Linux

Definition

Zenmap is the official graphical user interface (GUI) for Nmap, a network scanning and security auditing tool.

Primary purpose

Simplify network scanning by configuring scans, viewing results, and visualizing network information graphically.

Cybersecurity use

Network discovery, port scanning, security auditing, and authorized penetration testing.

Key features

Graphical interface

A visual alternative to running Nmap in a terminal.

Scan profiles

Predefined and custom scan profiles you can reuse.

Command generation

Shows the Nmap command for the chosen configuration.

Results visualization

Organizes results into hosts, ports and services views.

Network topology

Can display discovered network relationships visually.

Scan comparison

Compare results from different scans.

Important commands

zenmap

Launch Zenmap where the command is available.

nmap <target>

Basic scan (entered in Zenmap's Command field).

nmap -sn <target>

Discover hosts without a port scan.

nmap -sV <target>

Detect service versions.

nmap -A <target>

OS + version detection, scripts and traceroute.

Practical examples

01Launch Zenmap
command
zenmap

Purpose Opens the graphical interface where installed.

02Basic network scan
command
nmap 192.168.1.10

Purpose Scans common TCP ports on the host.

03Service version detection
command
nmap -sV 192.168.1.10

Purpose Identifies services and versions on open ports.

04Discover hosts
command
nmap -sn 192.168.1.0/24

Purpose Host discovery across the subnet.

Important points

  • Zenmap vs Nmap: Zenmap is the GUI; Nmap is the underlying scanning tool.
  • Command compatibility: Supported options depend on the installed Nmap version.
  • Scan profiles: Profiles make frequent scan configurations easy to reuse.
  • Availability: Zenmap is not included by default in every Nmap install.
  • Authorization: Scan only systems you own or are permitted to assess.

Common use cases

Network discovery

Identify active hosts on an authorized network.

Port auditing

Review open ports and exposed services.

Network visualization

View discovered hosts and relationships.

Security auditing

Assess exposure and verify configurations.

Learn it in context

This tool is taught in Module 03

Read the full written notes, with diagrams, defense and detection.

Open Module 03