---
description: Running Nmap in a terminal and learn how to use the built-in switches.
---

# Nmap Switches

| switch        |                                                                                               |
| ------------- | --------------------------------------------------------------------------------------------- |
| -ss           | syn scan                                                                                      |
| -sU           | UDP scan                                                                                      |
| -O            | detect operating system                                                                       |
| -sV           | detect version of services running on target                                                  |
| -v            | increase verbosity                                                                            |
| -vv           | increase verbosity even more                                                                  |
| -oA           | saves output to 3 major formats                                                               |
| -oN           | saves output to a normal format                                                               |
| -oG           | saves output in a grepable format                                                             |
| -A            | aggresively activates service detection, os detection, traceroute, and common script scanning |
| -T5           | sets timing template to level 5 (increases scan speed)                                        |
| -p 80         | only scans port 80                                                                            |
| -p 1000-1500  | only scans port range 1000-1500                                                               |
| -p-           | scans all ports                                                                               |
| --script      | activates a script from the nmap library                                                      |
| --script=vuln | activates all scripts from the "vuln" category                                                |
