The full nmap surface — host discovery, all scan techniques, ports, version/OS detection, the scripting engine, timing, firewall/IDS evasion and output. Toggle anything; the command assembles live, every flag is explained, and the blue-team counter updates alongside.
Red Team · Offensive builderBlue Team · Cyber Defence panel
No single command bypasses "any" firewall. Each evasion technique defeats a specific weakness — a stateless filter, a SYN-only rule, a device that ignores ICMP, a trusted source port. A well-configured stateful / next-gen firewall stops most of them. Pick a scenario and the workbench highlights what matches that weakness — and shows how a defender shuts it down.
Detail level
Filters which flags appear everywhere — start Basic, reveal the full toolkit when you need it.
01Target
Where the scan points. Use only hosts you own or are authorised to test.
02Firewall Scenario
What are you up against? This drives suggestions — matching the technique to the weakness is the core skill.
03Scan Technique
Pick one primary technique — it defines which flags the probe sets and how the target replies.
04Options — the full toolkit
Discovery, ports, detection, scripting, timing, evasion and output. Hover any row for what it does.
nmap — commandLIVE
$
▸What this command does
Plain-English breakdown of every active flag.
BLUE TEAMCyber Defence
How a defender detects & blocks whatever you've enabled.
Reference
Reading the firewall — the diagnostic loop
1 · Discover
Is the host up? If ping is blocked and it shows "down", force the scan with -Pn.
2 · Map the filter
Run -sA --reason. RST = unfiltered; silence / ICMP unreachable = filtered. This reveals the ruleset.
3 · Diagnose state
Compare SYN vs ACK vs NULL. Filtered on SYN but unfiltered on ACK = stateful. NULL/FIN return results = stateless, evadable.