> For the complete documentation index, see [llms.txt](https://oscp.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oscp.adot8.com/services/inital-scans.md).

# Inital Scans

```
nmap -p- --min-rate=1000 -Pn -v $ip 
```

```
nmap -sC -sV -T5 -Pn -p $open_ports $ip
```

<pre><code>nmap -sU -T4 -F -v $ip
<strong>nmap -p $open_ports --script=vuln -T5 -Pn $ip
</strong></code></pre>

```
nmap -p $open_ports -sC -sV --script=vuln -T5 -Pn $ip
```

```
echo $ip domain | sudo tee -a /etc/hosts
```

{% hint style="info" %}
Name of the box may be a service or username. Spam both lol
{% endhint %}