-```
-
- * `--flood` - sent packets as fast as possible (don't show replies)
- * `--rand-source` - random source address mode
- * `-d --data` - data size
- * `-w|--win` - winsize (default 64)
-
-___
-
-##### Tool: [nmap](https://nmap.org/)
-
-###### Ping scans the network
-
-```bash
-nmap -sP 192.168.0.0/24
-```
-
-###### Show only open ports
-
-```bash
-nmap -F --open 192.168.0.0/24
-```
-
-###### Full TCP port scan using with service version detection
-
-```bash
-nmap -p 1-65535 -sV -sS -T4 192.168.0.0/24
-```
-
-###### Nmap scan and pass output to Nikto
-
-```bash
-nmap -p80,443 192.168.0.0/24 -oG - | nikto.pl -h -
-```
-
-###### Recon specific ip:service with Nmap NSE scripts stack
-
-```bash
-# Set variables:
-_hosts="192.168.250.10"
-_ports="80,443"
-
-# Set Nmap NSE scripts stack:
-_nmap_nse_scripts="+dns-brute,\
- +http-auth-finder,\
- +http-chrono,\
- +http-cookie-flags,\
- +http-cors,\
- +http-cross-domain-policy,\
- +http-csrf,\
- +http-dombased-xss,\
- +http-enum,\
- +http-errors,\
- +http-git,\
- +http-grep,\
- +http-internal-ip-disclosure,\
- +http-jsonp-detection,\
- +http-malware-host,\
- +http-methods,\
- +http-passwd,\
- +http-phpself-xss,\
- +http-php-version,\
- +http-robots.txt,\
- +http-sitemap-generator,\
- +http-shellshock,\
- +http-stored-xss,\
- +http-title,\
- +http-unsafe-output-escaping,\
- +http-useragent-tester,\
- +http-vhosts,\
- +http-waf-detect,\
- +http-waf-fingerprint,\
- +http-xssed,\
- +traceroute-geolocation.nse,\
- +ssl-enum-ciphers,\
- +whois-domain,\
- +whois-ip"
-
-# Set Nmap NSE script params:
-_nmap_nse_scripts_args="dns-brute.domain=${_hosts},http-cross-domain-policy.domain-lookup=true,"
-_nmap_nse_scripts_args+="http-waf-detect.aggro,http-waf-detect.detectBodyChanges,"
-_nmap_nse_scripts_args+="http-waf-fingerprint.intensive=1"
-
-# Perform scan:
-nmap --script="$_nmap_nse_scripts" --script-args="$_nmap_nse_scripts_args" -p "$_ports" "$_hosts"
-```
-
-___
-
-##### Tool: [netcat](https://en.wikipedia.org/wiki/Netcat)
-
-```bash
-nc -kl 5000
-```
-
- * `-l` - listen for an incoming connection
- * `-k` - listening after client has disconnected
- * `>filename.out` - save receive data to file (optional)
-
-```bash
-nc 192.168.0.1 5051 < filename.in
-```
-
- * `< filename.in` - send data to remote host
-
-```bash
-nc -vz 10.240.30.3 5000
-```
-
- * `-v` - verbose output
- * `-z` - scan for listening daemons
-
-```bash
-nc -vzu 10.240.30.3 1-65535
-```
-
- * `-u` - scan only udp ports
-
-###### Transfer data file (archive)
-
-```bash
-server> nc -l 5000 | tar xzvfp -
-client> tar czvfp - /path/to/dir | nc 10.240.30.3 5000
-```
-
-###### Launch remote shell
-
-```bash
-# 1)
-server> nc -l 5000 -e /bin/bash
-client> nc 10.240.30.3 5000
-
-# 2)
-server> rm -f /tmp/f; mkfifo /tmp/f
-server> cat /tmp/f | /bin/bash -i 2>&1 | nc -l 127.0.0.1 5000 > /tmp/f
-client> nc 10.240.30.3 5000
-```
-
-###### Simple file server
-
-```bash
-while true ; do nc -l 5000 | tar -xvf - ; done
-```
-
-###### Simple minimal HTTP Server
-
-```bash
-while true ; do nc -l -p 1500 -c 'echo -e "HTTP/1.1 200 OK\n\n $(date)"' ; done
-```
-
-###### Simple HTTP Server
-
- > Restarts web server after each request - remove `while` condition for only single connection.
-
-```bash
-cat > index.html << __EOF__
-
-
-
-
-
-
-
-
-
-
-
-
- Hello! It's a site.
-
-
-
-
-