How to use the command 'vinmap' (with examples)

vinmap is a powerful multithreaded network scanner that leverages the capabilities of Nmap. It is designed to efficiently scan IP ranges by splitting them into chunks, running concurrent scans, and merging results into XML or JSON formats for comprehensive analysis. It simplifies the process of network scanning by optimizing resource utilization and offering flexibility in outputs and configurations.

Use case 1: Performing a basic scan of a subnet

Code:

vinmap -ip 192.168.1.0/24

Motivation:

A basic subnet scan is fundamental for network administrators to acquire information about all the devices connected within a local network segment. By doing so, administrators can quickly establish a map of active hosts and identify potential entry points for security assessments.

Explanation:

• -ip 192.168.1.0/24: This argument specifies the IP range to be scanned. The /24 indicates a subnet mask of 255.255.255.0, which covers all IP addresses from 192.168.1.0 to 192.168.1.255, effectively scanning up to 256 devices in a local network.

Example output:

Scanning results for 192.168.1.0/24:
192.168.1.1 - Up
192.168.1.2 - Up
192.168.1.10 - Down
...
192.168.1.254 - Up

Use case 2: Scanning a domain with version and OS detection, saving results to a specific file

Code:

vinmap -ip example.com -s "-sV -O" -o path/to/scan_results.xml

Motivation:

Performing a domain scan that includes version and OS detection is crucial for security assessments and inventory management. This allows network administrators to verify that devices and services are running the expected versions and to gather insights on possible vulnerabilities.

Explanation:

• -ip example.com: This specifies the domain to scan, translating it to its corresponding IP(s) using DNS.
• -s "-sV -O": This enables service version detection (-sV) and operating system detection (-O), providing detailed information about the services running and the operating systems used.
• -o path/to/scan_results.xml: This argument directs the output to be saved in the specified file path in XML format, making it easier to parse and share.

Example output:

Scan results saved to path/to/scan_results.xml

Use case 3: Scanning an IP range using 10 chunks and 20 concurrent threads

Code:

vinmap -ip 10.0.0.1-10.0.0.255 -n 10 -t 20

Motivation:

Dividing an IP range into chunks and running concurrent threads helps in speeding up the scan process, which is beneficial for larger networks. This configuration ensures an efficient use of resources, resulting in faster scan completion times without overwhelming the system.

Explanation:

• -ip 10.0.0.1-10.0.0.255: Defines the IP range for scanning.
• -n 10: Breaks the IP range into 10 separate chunks for parallel processing.
• -t 20: Utilizes 20 concurrent threads, optimizing the time taken to complete the scan compared to a linear approach.

Example output:

Scan completed: 255 IPs in 5 minutes
Chunked processing improved scan efficiency

Use case 4: Outputting scan results in JSON format

Code:

vinmap -ip 192.168.1.1-192.168.1.100 -f json

Motivation:

Obtaining scan results in JSON format is particularly useful for organizations that integrate network scanning outputs into automated processes or need them for further processing with web applications. JSON provides a clean, structured format that is widely supported across various programming environments.

Explanation:

• -ip 192.168.1.1-192.168.1.100: Sets the specific IP range for scanning.
• -f json: Specifies that the output should be in JSON format, simplifying integration into other platforms and tools.

Example output:

{
  "192.168.1.1": "up",
  "192.168.1.2": "down",
  ...
}

Use case 5: Scanning multiple IPs with default settings and saving merged XML output

Code:

vinmap -ip 192.168.1.1,192.168.1.2,...

Motivation:

Scanning multiple IPs using default settings is beneficial for quick checks or when the user doesn’t require complex scanning parameters. Consolidating these results into a merged XML format makes it easy to review and archive the scanning results for future reference.

Explanation:

• -ip 192.168.1.1,192.168.1.2,...: Lists the specific IPs to be scanned, allowing for targeted scanning of known IP addresses.
• The default settings are automatically applied without specific flags, focusing on basic host discovery and port scanning.
• The output is merged into a single XML file by default, facilitating a comprehensive view of all scanned IPs.

Example output:

Merged scan results saved in default_merged_results.xml

Conclusion:

vinmap is a versatile tool that enhances the capabilities of Nmap by offering an efficient, multithreaded scanning approach. Whether administering a small home network or managing a complex enterprise system, vinmap provides you with flexible options to meet your scanning needs and simplifies the task of identifying network assets and vulnerabilities. With the ability to segment scans, use of concurrent threads effectively, and versatile output formats, vinmap is a valuable addition to any network security toolkit.