What Is Nmap?

Nmap is an open-source network exploration and security auditing tool developed by Gordon Lyon, also known as Fyodor.

It helps users understand the structure of a network by discovering active devices and examining the services running on them.

Nmap can perform several important tasks:

• Discover active devices on a network.
• Identify open, closed and filtered ports.
• Detect running services and their versions.
• Estimate operating system information.
• Identify certain firewall and packet-filtering behaviors.
• Run scripts for additional security checks.
• Generate reports for network administrators.

Nmap is used by ethical hackers, penetration testers, network administrators, security researchers and IT teams.

Official website: https://nmap.org/

Nmap 7.993: What's New?

Nmap 7.993 was released on October 23, 2026. According to the official changelog, the update focuses on bug fixes and improvements rather than introducing a completely new scanning methodology.

Here are the important changes.

1. Fixed an NSE Version Detection Regression

One of the important fixes in Nmap 7.993 addresses a regression that prevented most scripts in the NSE version category from running.

The Nmap Scripting Engine (NSE) allows users to extend Nmap's functionality through scripts.

Version-category scripts help gather additional information about services running on target systems.

The fix improves the reliability of this functionality, making it important for users who depend on NSE scripts during service investigation.

2. Updated Npcap to Version 1.90 on Windows

Nmap 7.993 upgrades the included Windows Npcap version from 1.89 to 1.90.

This update resolves an issue that prevented most installations on Windows versions older than Windows 10.

Npcap is an important packet capture and transmission library used by Nmap on Windows systems.

The update improves compatibility for supported older Windows environments.

3. Updated Ncat's Certificate Bundle

Ncat is another utility included in the Nmap project.

It provides networking capabilities for reading, writing and redirecting data across network connections.

Nmap 7.993 updates the certificate bundle used by Ncat.

This is relevant for users working with secure network connections and certificate validation.

4. Improved Zenmap XML Handling

Zenmap is Nmap's graphical user interface.

The 7.993 release fixes an issue involving multiple operating system class elements in Nmap XML output.

Previously, subsequent OS class elements for a host could overwrite earlier ones.

The fix improves how Zenmap handles this information when displaying scan results.

Important: These are the changes documented in the official Nmap 7.993 changelog. Users should not confuse them with entirely new scanning features.

Official changelog: https://nmap.org/changelog.html

Nmap 7.993 vs Nmap 7.992

Nmap 7.992 was released on October 15, 2026, followed by Nmap 7.993 on October 23, 2026.

The two releases focus on different improvements.

The 7.992 release also included updates to several libraries, including libpcap, PCRE2 and Lua in the source distribution, as well as OpenSSL and Python in binary installers.

For users who regularly perform network assessments, staying on the latest stable release helps ensure that they benefit from the project's latest fixes.

How to Download and Install Nmap 7.993

Nmap 7.993 is available through the official Nmap download page.

Download page: https://nmap.org/download.html

Install Nmap on Windows

Follow these steps:

1. Visit the official Nmap download page.
2. Download the Windows installer for Nmap 7.993.
3. Run the installer.
4. Follow the installation instructions.
5. Allow the installer to install Npcap when required.
6. Complete the installation.

To verify the installation, open Command Prompt and execute:

nmap --version

You should see the installed Nmap version in the output.

Install Nmap on Kali Linux or Debian-Based Systems

For Kali Linux, Ubuntu and other Debian-based systems, use the package manager:

sudo apt update
sudo apt install nmap

Check the installed version:

nmap --version

Note: Distribution repositories may not immediately provide the latest upstream version. If you specifically need Nmap 7.993, check the version supplied by your repository or use the official source distribution and installation instructions.

Install Nmap on macOS

1. Visit the official download page.
2. Download the macOS installer.
3. Open the downloaded disk image.
4. Follow the installation instructions.
5. Open Terminal and verify the installation.

Use:

nmap --version

Always download installation packages from official sources and verify signatures or checksums where available.

How to Use Nmap 7.993 for Network Scanning

After installation, users can start exploring Nmap through its command-line interface.

The following examples use localhost or an authorized private lab network. Only scan systems and networks for which you have permission.

1. Check the Nmap Version

Before starting a scan, verify the installed version.

nmap --version

This displays version information and relevant build details.

2. Scan Your Local Machine

To scan your own computer, use:

nmap 127.0.0.1

This checks commonly scanned TCP ports on the local system.

The results may show ports in different states, such as open, closed or filtered.

3. Discover Active Hosts on an Authorized Network

Nmap can identify which devices appear to be active within a local network.

For example:

nmap -sn 192.168.1.0/24

The -sn option performs host discovery without carrying out a port scan.

Replace the example subnet with the private network you administer.

4. Perform a Basic Port Scan

To check common TCP ports on a system you own or are authorized to test:

nmap 127.0.0.1

Nmap reports the state of the ports it checks.

Common states include:

• Open: An application is listening on the port.
• Closed: The port is reachable, but no application is listening.
• Filtered: Nmap cannot determine whether the port is open because packet filtering prevents a clear result.

Understanding these states helps administrators identify services that may require further investigation.

5. Detect Service Versions

A port number does not always reveal exactly which application is running.

Nmap's service version detection feature can help identify the service and, where possible, its version.

For an authorized local test:

nmap -sV 127.0.0.1

The -sV option enables service and version detection.

This information can help security teams identify outdated services and prioritize further investigation.

6. Identify Operating System Information

Nmap includes operating system detection capabilities.

For an authorized lab machine, use:

sudo nmap -O 127.0.0.1

The -O option attempts to identify the operating system based on network responses.

Operating system detection may require elevated privileges and may not always produce an exact result.

7. Scan Specific Ports

Sometimes administrators need to investigate only a few services.

For example:

nmap -p 22,80,443 127.0.0.1

This checks the selected ports on the local system.

Common port numbers include:

These are common associations, not guarantees. Actual services can run on different ports.

Understanding the Nmap Scripting Engine (NSE)

The Nmap Scripting Engine is one of the most powerful parts of the Nmap ecosystem.

It allows users to run scripts that provide additional information about network services and systems.

NSE scripts are organized into categories, including:

• Default: Scripts considered useful for common scans.
• Discovery: Scripts that gather additional information about targets.
• Version: Scripts that help with service and version detection.
• Safe: Scripts not expected to crash services or consume excessive resources.
• Vuln: Scripts that check for known vulnerabilities.
• Auth: Scripts related to authentication mechanisms.

Nmap 7.993 includes an important fix for a regression affecting most scripts in the version category.

This is especially relevant to security professionals who use service detection and additional script-based analysis.

Always review individual scripts and their potential impact before running them against production systems.

Official NSE documentation: https://nmap.org/book/nse.html

What Is Zenmap and Why Is It Useful?

Zenmap is the graphical user interface for Nmap.

While many experienced security professionals prefer command-line operations, beginners may find a graphical interface easier to understand.

Zenmap helps users:

• Configure scans through a graphical interface.
• View scan results in an organized format.
• Compare previous scan results.
• Visualize network topology.
• Save scan profiles.
• Review discovered hosts and services.

The Nmap 7.993 release also includes a fix for how Zenmap handles multiple OS class elements in XML output.

This helps improve the consistency of operating system information displayed from scan results.

Nmap vs Other Network Scanning Tools

Nmap is not the only network discovery and security assessment tool available.

Different tools are designed for different types of security work.

For example, a security team may use Nmap to discover active hosts, Wireshark to analyze network communication and a vulnerability scanner to investigate known security weaknesses.

Each tool has a different role in the security assessment process.

Why Is Nmap Important for Ethical Hackers?

Ethical hackers need to understand a target environment before conducting a security assessment.

Network discovery is often one of the early steps in this process.

Nmap helps security professionals gather information about authorized systems and identify services that may require further examination.

Some practical applications include:

Network reconnaissance: Understanding which devices are active in an authorized testing environment.

Attack surface assessment: Identifying exposed ports and services that may increase security risk.

Service inventory: Discovering running applications and their versions.

Firewall verification: Checking whether network filtering behaves as expected.

Security auditing: Supporting periodic reviews of network infrastructure.

Nmap provides useful technical information, but it does not automatically prove that a system is vulnerable. Additional investigation and validation are necessary.

Best Practices for Safe Nmap Scanning

Network scanning should always be performed responsibly.

Here are some important practices for cybersecurity professionals and network administrators:

1. Obtain permission: Scan only systems and networks that you own or have explicit authorization to assess.
2. Define the scope: Identify the approved IP addresses, hosts and testing window before scanning.
3. Start with basic discovery: Use appropriate host discovery methods before conducting more detailed scans.
4. Avoid unnecessary traffic: Choose scan options according to the actual testing requirement.
5. Review NSE scripts: Understand what a script does before executing it.
6. Protect scan results: Network reports can contain sensitive infrastructure information.
7. Keep Nmap updated: Install supported releases and review official changelogs.

For production networks, coordinate scans with system owners and follow the organization's testing policies.

Conclusion

Nmap 7.993 is an important maintenance release for one of the most widely used network discovery and security auditing tools.

Released on October 23, 2026, it fixes an NSE version-category regression, upgrades Windows Npcap to version 1.90, updates Ncat's certificate bundle and improves Zenmap's handling of operating system information in XML results.

The best results come from combining Nmap with other security tools, proper testing procedures and experienced human analysis.