> For the complete documentation index, see [llms.txt](https://oklencodes.gitbook.io/untitled/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oklencodes.gitbook.io/untitled/ctfs/healthcare-openemr-system-thm-plotted-emr/recon-with-nmap.md).

# Recon with Nmap

First ran the Nmap scan. This is usually my basic port range. Depending on what I find or what I think I might be missing from the ports that are displayed, I will run a wider range scan. 

![](https://2022164620-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtzurpgroDJSMn9AFVmQP%2Fuploads%2Fl6C14SD5eiAXqnIXZLNr%2FNmap%20scan.PNG?alt=media\&token=7d5a1fab-4f0e-46a2-93bf-d38a9aaf682b)

"-sS" is usually a default but I run it out of habit, it means TCP SYN port scan

"-sV" Attempts to determine the version of the service running on port

"-p" are the ports which I specified 0-10000.