EDU-SEC / 01AUTHORIZED LAB MODE

See the network.
Understand the signal.

A guided Nmap learning console that turns command-line scans into clear visual evidence, explanations, and practical security advice.

Initialize Console ↗
07Scan profiles
05Report views
100%Learning focused
NODE // NX-0100:00:00 UTC
NETWORK VISIBILITYACTIVEPassive simulation environment ready
01

Target validation

READY
02

Command translation

READY
03

Risk interpretation

READY
01

Mission Control

Build an Nmap command, run a guided simulation, then inspect each port and security finding. Only scan systems you own or have permission to test.

01 Guided presets 02 Port intelligence 03 Topology view 04 Command generator
⌖ Target & Scan Parameters
INPUT CHANNEL OPEN
IP
Quick Demo Targets:
📡 Quick Ping Sweep
Host Discovery
Find live devices on a network without probing individual ports. Fast & quiet.
nmap -sn [target]
⚡ Fast Port Scan
Top 100
Scans the top 100 most popular TCP ports in just a couple of seconds.
nmap -F -T4 [target]
🛡️ Standard Audit
Recommended
Balanced scan checking top 1000 ports, service versions, and OS fingerprints.
nmap -sS -sV -O -Pn -T4 [target]
🔥 Intense Security Scan
Deep Inspection
Comprehensive scan enabling aggressive OS, version, script, and traceroute checks.
nmap -T4 -A -v [target]
☣️ Vulnerability Check
NSE Scripts
Runs Nmap Scripting Engine (NSE) modules to detect known CVEs & security flaws.
nmap -sV --script vuln [target]
🔍 Full 65k Port Sweep
All Ports
Checks every port from 1 to 65535 to ensure no non-standard services are hidden.
nmap -p 1-65535 -sV [target]
🌐 UDP Services Scan
UDP Protocol
Probes high-priority UDP services like DNS (53), DHCP (67), and SNMP (161).
nmap -sU --top-ports 50 [target]
Live Equivalent Nmap Command (hover flags to learn):
Phase 1/5: Initiating Scan... 0%
Target Device -
Host State Host Up
Round-Trip Time -
OS Family -
Open Ports 0
Security Risk Rating LOW

            
📖 Beginner Guide: Understanding Nmap
What is Nmap?
Nmap (Network Mapper) is an open-source tool used by security engineers to discover hosts and services on a computer network.
TCP SYN (-sS) vs TCP Connect (-sT)
SYN Scan (-sS): Sends a TCP SYN packet. If the port replies with SYN-ACK, Nmap knows it's open, and sends RST without establishing a full connection. Fast & stealthy.
Connect Scan (-sT): Asks the OS kernel to complete a full 3-way handshake. Used when unprivileged account lacks raw socket permissions.
Port States Explained
Open: An application is actively accepting connections on this port.
Filtered: A firewall or network filter is blocking Nmap probes from reaching the port.
Closed: No application is listening, but the host responded to probes.
Ethical Rules of Scanning
Always obtain explicit authorized permission before scanning any host or network that you do not personally own! Unauthorized network scanning may violate laws or network policies.
⚙️ Connect Real Nmap Local Backend

By default, this web tool runs in an interactive client simulation mode. If you want to connect it to a real live local nmap binary on your computer, run this simple Node.js backend server:

// server.js (Node.js + Express) const express = require('express'); const { exec } = require('child_process'); const cors = require('cors'); const app = express(); app.use(express.json()); app.use(cors()); app.post('/api/scan', (req, res) => { const { command } = req.body; // Sanitize command inputs carefully exec(command, (error, stdout, stderr) => { res.json({ output: stdout || stderr }); }); }); app.listen(5000, () => console.log('Nmap API Bridge running on port 5000'));

Once running locally on http://localhost:5000, scans executed in this browser GUI can execute real binary commands!

02

Build Your Operator Knowledge

Read the generated command, predict the result, then compare it with the visual report. Each scan becomes a practical networking lesson.

01 / Host DiscoveryCORE
02 / Port StatesCORE
03 / Service DetectionINT
04 / OS FingerprintingINT
05 / NSE ScriptsADV
06 / Risk AnalysisADV

Permission Is Part of the Process.

Scan only your own devices, a controlled lab, or a target that has given you explicit authorization. Responsible testing protects both the learner and the network.

Return to Console