Ping Sweep

nmap -sn 10.10.10.0/24

nmap -sn 10.10.10.1-50

nmap -sn -n 10.10.10.0/24

nmap -sn 10.10.10.0/24 -oG - | grep "Up" | awk '{print $2}'

fping -a -g 10.10.10.0/24 2>/dev/null

for i in $(seq 1 254); do (ping -c 1 -W 1 10.10.10.$i | grep "bytes from" &); done

for /L %i in (1,1,254) do @ping -n 1 -w 200 10.10.10.%i | find "Reply" && echo 10.10.10.%i is alive

1..254 | % { Test-Connection -Count 1 -Quiet -ComputerName "10.10.10.$_" -ErrorAction SilentlyContinue | ? { $_ } | % { "10.10.10.$using:_" } }

1..254 | ForEach-Object -Parallel {
    if (Test-Connection -Count 1 -Quiet -ComputerName "10.10.10.$_" -ErrorAction SilentlyContinue) {
        "10.10.10.$_"
    }
} -ThrottleLimit 50

arp-scan -l

arp-scan -l -I eth0

arp-scan 10.10.10.0/24

nmap -sn -PR 10.10.10.0/24

nmap -sn -PS22,80,443,445,3389 10.10.10.0/24

nmap -sn -PA80,443 10.10.10.0/24

nmap -sn -PU53,161 10.10.10.0/24

netdiscover -r 10.10.10.0/24

netdiscover -p -i eth0

Same subnet?
├─ Yes → arp-scan -l (fastest, can't be blocked)
└─ No
   ├─ ICMP allowed? → nmap -sn (standard ping sweep)
   └─ ICMP blocked? → nmap -sn -PS22,80,443 (TCP discovery)