kali fping工具，扫描网络存活主机

fping扫描网络存活主机，并保存为文件：
root@kali:~# fping -g 192.168.50.0/24 -a -q > activeHost
root@kali:~# cat activeHost
192.168.50.1
192.168.50.2
192.168.50.128

端口扫描：

扫描192.168.0.3这台主机开放了哪些端口；
[root@laolinux ~]# nmap -sT 192.168.0.3
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2009-04-25 07:02 CST
Interesting ports on laolinux (192.168.0.3):
Not shown: 1667 closed ports
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop3
111/tcp open rpcbind
143/tcp open imap
964/tcp open unknown
993/tcp open imaps
995/tcp open pop3s
3306/tcp open mysql
10000/tcp open snet-sensor-mgmt
Nmap finished: 1 IP address (1 host up) scanned in 4.755 seconds

Nmap 将探测所有打开的端口，并尝试从每个端口上运行的服务中获取信息。

nmap -sV 192.168.56.102