Nmap

Cheatsheet :

Most detailed command

sudo nmap -sS -sV -T4 -Pn -p- <IP> -oN nmap_scan_results.txt

There are also scripts present which you can run with nmap

Example : Here I have run multiple scripts at once

sudo nmap --script "ftp-anon,http-title,http-methods,ssl-cert,rtsp-url-brute,pptp-version" -p21,80,443,554,1723 <IP>

Check which scripts are present by going to :

cd /opt/homebrew/opt/nmap/share/nmap/scripts