"use strict"; const {Fragment: _Fragment, jsx: _jsx, jsxs: _jsxs} = arguments[0]; const {useMDXComponents: _provideComponents} = arguments[0]; function _createMdxContent(props) { const _components = { a: "a", code: "code", div: "div", h2: "h2", h4: "h4", hr: "hr", li: "li", p: "p", path: "path", pre: "pre", span: "span", strong: "strong", svg: "svg", table: "table", tbody: "tbody", td: "td", th: "th", thead: "thead", tr: "tr", ul: "ul", ..._provideComponents(), ...props.components }; return _jsxs(_Fragment, { children: [_jsx(_components.hr, {}), "\n", _jsx(_components.p, { children: "#nmap #enumeration" }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.p, { children: ["El rendimiento del escaneo juega un papel importante cuando necesitamos escanear una red extensa o estamos lidiando con un ancho de banda de red bajo. Podemos usar varias opciones para saber qué tan rápido (), con qué frecuencia (), qué tiempos de espera () deben tener los paquetes de prueba, cuántos paquetes deben enviarse simultáneamente (), y con el número de reintentos () para los puertos escaneados se deben escanear los objetivos.", _jsx(_components.code, { className: "language-auto", children: "Nmap``-T <0-5>``--min-parallelism ``--max-rtt-timeout ``--min-rate ``--max-retries " })] }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "timeouts", children: [_jsx(_components.a, { className: "heading-link", href: "#timeouts", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Timeouts"] }), "\n", _jsxs(_components.p, { children: ["Cuando Nmap envía un paquete, tarda algún tiempo ( - ) en recibir una respuesta del puerto escaneado. Generalmente, comienza con un tiempo de espera alto () de 100 ms. Veamos un ejemplo escaneando toda la red con 256 hosts, incluidos los 100 puertos principales.", _jsx(_components.code, { className: "language-auto", children: "Round-Trip-Time``RTT``Nmap``--min-RTT-timeout" })] }), "\n", _jsxs(_components.h4, { id: "análisis-predeterminado", children: [_jsx(_components.a, { className: "heading-link", href: "#análisis-predeterminado", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Análisis predeterminado"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ sudo nmap 10.129.2.0/24 -F\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "Nmap done: 256 IP addresses (10 hosts up) scanned in 39.44 seconds\n" }) })] }) }), "\n", _jsxs(_components.h4, { id: "rtt-optimizado", children: [_jsx(_components.a, { className: "heading-link", href: "#rtt-optimizado", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "RTT optimizado"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ sudo nmap 10.129.2.0/24 -F --initial-rtt-timeout 50ms --max-rtt-timeout 100ms\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "Nmap done: 256 IP addresses (8 hosts up) scanned in 12.29 seconds\n" }) })] }) }), "\n", _jsx(_components.div, { className: "overflow-x-auto", children: _jsxs(_components.table, { children: [_jsx(_components.thead, { children: _jsxs(_components.tr, { children: [_jsx(_components.th, { children: _jsx(_components.strong, { children: "Opciones de escaneo" }) }), _jsx(_components.th, { children: _jsx(_components.strong, { children: "Descripción" }) })] }) }), _jsxs(_components.tbody, { children: [_jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "10.129.2.0/24" }) }), _jsx(_components.td, { children: "Explora la red de destino especificada." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "-F" }) }), _jsx(_components.td, { children: "Analiza los 100 puertos principales." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "--initial-rtt-timeout 50ms" }) }), _jsx(_components.td, { children: "Establece el valor de tiempo especificado como tiempo de espera RTT inicial." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "--max-rtt-timeout 100ms" }) }), _jsx(_components.td, { children: "Establece el valor de tiempo especificado como tiempo de espera RTT máximo." })] })] })] }) }), "\n", _jsxs(_components.p, { children: ["Al comparar los dos escaneos, podemos ver que encontramos dos hosts menos con el escaneo optimizado, pero el escaneo tomó solo una cuarta parte del tiempo. A partir de esto, podemos concluir que establecer el tiempo de espera RTT inicial () en un período de tiempo demasiado corto puede hacer que pasemos por alto los hosts.", _jsx(_components.code, { className: "language-auto", children: "--initial-rtt-timeout" })] }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "número-máximo-de-reintentos", children: [_jsx(_components.a, { className: "heading-link", href: "#número-máximo-de-reintentos", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Número máximo de reintentos"] }), "\n", _jsxs(_components.p, { children: ["Otra forma de aumentar la velocidad de los análisis es especificar la tasa de reintento de los paquetes enviados (). El valor predeterminado para la tasa de reintentos es , por lo que si no recibe una respuesta para un puerto, no enviará más paquetes al puerto y se omitirá.", _jsx(_components.code, { className: "language-auto", children: "--max-retries``10``Nmap" })] }), "\n", _jsxs(_components.h4, { id: "análisis-predeterminado-1", children: [_jsx(_components.a, { className: "heading-link", href: "#análisis-predeterminado-1", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Análisis predeterminado"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ sudo nmap 10.129.2.0/24 -F | grep \"/tcp\" | wc -l\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "23\n" }) })] }) }), "\n", _jsxs(_components.h4, { id: "reducción-de-reintentos", children: [_jsx(_components.a, { className: "heading-link", href: "#reducción-de-reintentos", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Reducción de reintentos"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ sudo nmap 10.129.2.0/24 -F --max-retries 0 | grep \"/tcp\" | wc -l\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "21\n" }) })] }) }), "\n", _jsx(_components.div, { className: "overflow-x-auto", children: _jsxs(_components.table, { children: [_jsx(_components.thead, { children: _jsxs(_components.tr, { children: [_jsx(_components.th, { children: _jsx(_components.strong, { children: "Opciones de escaneo" }) }), _jsx(_components.th, { children: _jsx(_components.strong, { children: "Descripción" }) })] }) }), _jsxs(_components.tbody, { children: [_jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "10.129.2.0/24" }) }), _jsx(_components.td, { children: "Explora la red de destino especificada." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "-F" }) }), _jsx(_components.td, { children: "Analiza los 100 puertos principales." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "--max-retries 0" }) }), _jsx(_components.td, { children: "Establece el número de reintentos que se realizarán durante el examen." })] })] })] }) }), "\n", _jsx(_components.p, { children: "Una vez más, reconocemos que acelerar también puede tener un efecto negativo en nuestros resultados, lo que significa que podemos pasar por alto información importante." }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "tarifas", children: [_jsx(_components.a, { className: "heading-link", href: "#tarifas", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Tarifas"] }), "\n", _jsxs(_components.p, { children: ["Durante una prueba de penetración de caja blanca, es posible que nos incluyan en la lista blanca de los sistemas de seguridad para verificar los sistemas en la red en busca de vulnerabilidades y no solo probar las medidas de protección. Si conocemos el ancho de banda de la red, podemos trabajar con la velocidad de paquetes enviados, lo que acelera significativamente nuestros escaneos con . Al establecer la velocidad mínima () para el envío de paquetes, le decimos que envíe simultáneamente el número especificado de paquetes. Tratará de mantener la tasa en consecuencia.", _jsx(_components.code, { className: "language-auto", children: "Nmap``--min-rate ``Nmap" })] }), "\n", _jsxs(_components.h4, { id: "análisis-predeterminado-2", children: [_jsx(_components.a, { className: "heading-link", href: "#análisis-predeterminado-2", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Análisis predeterminado"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ sudo nmap 10.129.2.0/24 -F -oN tnet.default\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "Nmap done: 256 IP addresses (10 hosts up) scanned in 29.83 seconds\n" }) })] }) }), "\n", _jsxs(_components.h4, { id: "escaneo-optimizado", children: [_jsx(_components.a, { className: "heading-link", href: "#escaneo-optimizado", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Escaneo optimizado"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ sudo nmap 10.129.2.0/24 -F -oN tnet.minrate300 --min-rate 300\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "Nmap done: 256 IP addresses (10 hosts up) scanned in 8.67 seconds\n" }) })] }) }), "\n", _jsx(_components.div, { className: "overflow-x-auto", children: _jsxs(_components.table, { children: [_jsx(_components.thead, { children: _jsxs(_components.tr, { children: [_jsx(_components.th, { children: _jsx(_components.strong, { children: "Opciones de escaneo" }) }), _jsx(_components.th, { children: _jsx(_components.strong, { children: "Descripción" }) })] }) }), _jsxs(_components.tbody, { children: [_jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "10.129.2.0/24" }) }), _jsx(_components.td, { children: "Explora la red de destino especificada." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "-F" }) }), _jsx(_components.td, { children: "Analiza los 100 puertos principales." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "-oN tnet.minrate300" }) }), _jsx(_components.td, { children: "Guarda los resultados en formatos normales, iniciando el nombre de archivo especificado." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "--min-rate 300" }) }), _jsx(_components.td, { children: "Establece el número mínimo de paquetes que se enviarán por segundo." })] })] })] }) }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h4, { id: "escaneo-predeterminado-puertos-abiertos-encontrados", children: [_jsx(_components.a, { className: "heading-link", href: "#escaneo-predeterminado-puertos-abiertos-encontrados", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Escaneo predeterminado: puertos abiertos encontrados"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ cat tnet.default | grep \"/tcp\" | wc -l\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "23\n" }) })] }) }), "\n", _jsxs(_components.h4, { id: "escaneo-optimizado-puertos-abiertos-encontrados", children: [_jsx(_components.a, { className: "heading-link", href: "#escaneo-optimizado-puertos-abiertos-encontrados", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Escaneo optimizado: puertos abiertos encontrados"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ cat tnet.minrate300 | grep \"/tcp\" | wc -l\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "23\n" }) })] }) }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "cronometraje", children: [_jsx(_components.a, { className: "heading-link", href: "#cronometraje", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Cronometraje"] }), "\n", _jsxs(_components.p, { children: ["Debido a que estos ajustes no siempre se pueden optimizar manualmente, como en una prueba de penetración de caja negra, ofrece seis plantillas de tiempo diferentes () para que las utilicemos. Estos valores () determinan la agresividad de nuestros escaneos. Esto también puede tener efectos negativos si el escaneo es demasiado agresivo, y los sistemas de seguridad pueden bloquearnos debido al tráfico de red producido. La plantilla de temporización predeterminada que se usa cuando no hemos definido nada más es la normal ().", _jsx(_components.code, { className: "language-auto", children: "Nmap``-T <0-5>``0-5``-T 3" })] }), "\n", _jsxs(_components.ul, { children: ["\n", _jsxs(_components.li, { children: [_jsx(_components.code, { className: "language-auto", children: "-T 0" }), " / ", _jsx(_components.code, { className: "language-auto", children: "-T paranoid" })] }), "\n", _jsxs(_components.li, { children: [_jsx(_components.code, { className: "language-auto", children: "-T 1" }), " / ", _jsx(_components.code, { className: "language-auto", children: "-T sneaky" })] }), "\n", _jsxs(_components.li, { children: [_jsx(_components.code, { className: "language-auto", children: "-T 2" }), " / ", _jsx(_components.code, { className: "language-auto", children: "-T polite" })] }), "\n", _jsxs(_components.li, { children: [_jsx(_components.code, { className: "language-auto", children: "-T 3" }), " / ", _jsx(_components.code, { className: "language-auto", children: "-T normal" })] }), "\n", _jsxs(_components.li, { children: [_jsx(_components.code, { className: "language-auto", children: "-T 4" }), " / ", _jsx(_components.code, { className: "language-auto", children: "-T aggressive" })] }), "\n", _jsxs(_components.li, { children: [_jsx(_components.code, { className: "language-auto", children: "-T 5" }), " / ", _jsx(_components.code, { className: "language-auto", children: "-T insane" })] }), "\n"] }), "\n", _jsxs(_components.p, { children: ["Estas plantillas contienen opciones que también podemos configurar manualmente, y ya hemos visto algunas de ellas. Los desarrolladores determinaron los valores establecidos para estas plantillas de acuerdo con sus mejores resultados, lo que nos facilitó adaptar nuestros escaneos al entorno de red correspondiente. Las opciones exactas utilizadas con sus valores las podemos encontrar aquí: ", _jsx(_components.a, { href: "https://nmap.org/book/performance-timing-templates.html", target: "_blank", rel: "noopener noreferrer", children: "https://nmap.org/book/performance-timing-templates.html" })] }), "\n", _jsxs(_components.h4, { id: "análisis-predeterminado-3", children: [_jsx(_components.a, { className: "heading-link", href: "#análisis-predeterminado-3", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Análisis predeterminado"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ sudo nmap 10.129.2.0/24 -F -oN tnet.default \n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "Nmap done: 256 IP addresses (10 hosts up) scanned in 32.44 seconds\n" }) })] }) }), "\n", _jsxs(_components.h4, { id: "escaneo-loco", children: [_jsx(_components.a, { className: "heading-link", href: "#escaneo-loco", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Escaneo loco"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ sudo nmap 10.129.2.0/24 -F -oN tnet.T5 -T 5\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "Nmap done: 256 IP addresses (10 hosts up) scanned in 18.07 seconds\n" }) })] }) }), "\n", _jsx(_components.div, { className: "overflow-x-auto", children: _jsxs(_components.table, { children: [_jsx(_components.thead, { children: _jsxs(_components.tr, { children: [_jsx(_components.th, { children: _jsx(_components.strong, { children: "Opciones de escaneo" }) }), _jsx(_components.th, { children: _jsx(_components.strong, { children: "Descripción" }) })] }) }), _jsxs(_components.tbody, { children: [_jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "10.129.2.0/24" }) }), _jsx(_components.td, { children: "Explora la red de destino especificada." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "-F" }) }), _jsx(_components.td, { children: "Analiza los 100 puertos principales." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "-oN tnet.T5" }) }), _jsx(_components.td, { children: "Guarda los resultados en formatos normales, iniciando el nombre de archivo especificado." })] }), _jsxs(_components.tr, { children: [_jsx(_components.td, { children: _jsx(_components.code, { className: "language-auto", children: "-T 5" }) }), _jsx(_components.td, { children: "Especifica la plantilla de temporización insensata." })] })] })] }) }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h4, { id: "escaneo-predeterminado-puertos-abiertos-encontrados-1", children: [_jsx(_components.a, { className: "heading-link", href: "#escaneo-predeterminado-puertos-abiertos-encontrados-1", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Escaneo predeterminado: puertos abiertos encontrados"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ cat tnet.default | grep \"/tcp\" | wc -l\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "23\n" }) })] }) }), "\n", _jsxs(_components.h4, { id: "escaneo-loco---puertos-abiertos-encontrados", children: [_jsx(_components.a, { className: "heading-link", href: "#escaneo-loco---puertos-abiertos-encontrados", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Escaneo loco - Puertos abiertos encontrados"] }), "\n", _jsx(_components.p, { children: " Rendimiento" }), "\n", _jsx(_components.pre, { className: "language-shell-session", children: _jsxs(_components.code, { className: "language-shell-session code-highlight", children: [_jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "zunderrubb@htb[/htb]$ cat tnet.T5 | grep \"/tcp\" | wc -l\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "\n" }) }), _jsx(_components.span, { className: "code-line", children: _jsx(_components.span, { className: "token output", children: "23\n" }) })] }) })] }); } function MDXContent(props = {}) { const {wrapper: MDXLayout} = { ..._provideComponents(), ...props.components }; return MDXLayout ? _jsx(MDXLayout, { ...props, children: _jsx(_createMdxContent, { ...props }) }) : _createMdxContent(props); } return { default: MDXContent };