nmap -sP -p <ip> #ping scan

nmap -PN -sV --top-ports 50 --open <ip> #search smb vuln

nmap -PN --script smb-vuln* -p139,445 <ip> #classic scan

nmap -PN -sC -sV -p- -oA <output> <ip> #Full scan, demorado, -oA es opcional

nmap -sU -sC -sV -oA <output> <ip> #udpScan

nmap -sV -Pn --script vulners <ip> #scan search vulnerabilities