Nmap Cheat Sheet DNS Brute Force nmap -p 80 --script dns-brute <host> Find virtual hosts on an IP address nmap -p 80 --script hostmap-bfk <host> Traceroute Geolocation nmap -p 80 --traceroute --script traceroute-geolocation.nse <host> HTTP Scripts HTTP Enum - web path brute force nmap -p 80 --script http-enum <host> HTTP Title nmap -p 80 -sV --script http-title <ip range>