Nmap: How to use the king of network scanning

root@kali:~# Nmap
Nmap 7.80 ( https://Nmap.org)
Usage: Nmap [Scan Type(s)] [Options] {{target specification}
TARGET SPECIFICATION:
  Can pass hostnames, IP addresses, networks, ..
  
  Ex: scanme.Nmap.org, Microsoft.com/24, 192.168.0.1;  10.0.0-255.1-254
  -iL  <inputfilename>: Input from list of hosts/networks
  -iR  <num hosts>: Choose random targets
  --exclude <host1[,host2][,host3], ...>: Exclude hosts/networks
  --excludefile <exclude_file>: Exclude list from fillet
HOST DISCOVERY:
  -sL: List Scan - simply list targets to scan
  -sn: Ping Scan - disable port scan
  -Pn: Treat all hosts as on-line -- skip host discovery
  -PS/PA/PU/PY[portlist]: TCP SYN/ACK, UDP or SCTP discovery to given ports
  -PE/PP/PM: ICMP threw out, timestamp, and netmask request discovery probes
  -PO[protocol list]: IP Protocol Ping
  -n/-R: Never do DNS resolution/Always resolve [default: Sometimes]
 
  --dns-servers <serv1[,serv2], ...>: Specify custom DNS servers
  --system-dns: Use  OS's DNS resolver
  --traceroute: Trace hop path to each host
SCAN TECHNIQUES:
  -sS / sT / sA / sW / sM: TCP SYN / Connect () / ACK / Window / Maimon scans
  -sU: UDP Scan
  -sN / sF / sX: TCP Null, FIN, and Xmas scans
  --scanflags <flags>: Customize TCP scan flags
  -sI <zombie host [: probeport]>: Idle scan
  -sY / sZ: SCTP INIT / COOKIE-ECHO scans
  -sO: IP protocol scan
  -b <FTP relay host>: FTP bounce scan
PORT SPECIFICATION AND SCAN ORDER:
  -p <port ranges>: Only scan specified ports
    Ex: -p22; -p1-65535; -p U: 53,111,137, T: 21-25,80,139,8080, S: 9
  --exclude-ports <port ranges>: Exclude the specified ports from scanning
  -F: Fast mode - Scan fewer ports than the default scan
  -r: Scan ports consecutively - don 't randomize
  --top-ports <number>: Scan <number> most common ports
  --port-ratio <ratio>: Scan ports are more common than usual <ratio>
SERVICE/DETECTION VERSION:
  -sV: Probe open ports to determine service/version info
  --version-intensity <level>: Set from 0 (and "light", too) to 9 (try all probes)
  --version-and "light", too: Limit to most likely probes (intensity 2)
  --version-ALL: Try every single probe (intensity 9)
  --version-trace: Show detailed version scan activity (forum debugging)
SCRIPT SCAN:
  -sC: equivalent to --script=default
  --script= <Lua scripts>: <Lua scripts> is a separate comma list of directories, script-files or script-categories
  --script-args= <n1=v1,[n2=v2, ...]>: provide arguments to scripts
  --script-args-fillet=filename: provide NSE script args in a fillet
  --script-trace: Show all data sent and received
  --script-updatedb: Update the script database.
  --script-help= <Lua scripts>: Show help about scripts.
           <Lua scripts> is a comma-separated list of script-files or script-categories.
OS DETECTION:
  -O: Enable OS detection
  --osscan-limit: Limit OS detection to promising targets
  --osscan-guess: Guess OS more aggressively TIMING AND PERFORMANCE:
  Options which take <time> are in seconds, or append 'ms' (milliseconds),
  's' (seconds), 'm' (minutes),  or  'h' (hours) to the value (e.g. 30m).
 
 
-T<0-5>: Set timing template (higher is faster)
  --min-hostgroup/Max-hostgroup <size>: Parallel host scan group sizes
  --min-parallelism/Max-parallelism <numprobes>: Probe parallelization
  --min-rtt-timeout/Max-rtt-timeout/initial-rtt-timeout <time>: Specifies probe round trip time.
  --Max-retries <pickings>: Caps number of port scan probe retransmissions.
  --host-timeout <time>: Give up on target after this long
  --scan-delay/ -Max-scan-delay <time>: Adjustable delay between probes
  --min-rates <number>: Send packets no slower than <number> per second
  --Max-rates <number>: Send packets no faster than <number> per second FIREWALL/EVASION AND SPOOFING IDS:
  -f; --my you <wave>: fragment packets (optionally w/given MTU)
  -D  <decoy1,decoy2[,ME], ...>: Cloak a scan with decoys
  -S  <IP_Address>: Spoof source address
  -e  <iface>: Use specified interface
  -g/ -source-port <portnum>: Use given port number
  --proxies <url1,[url2], ...>: Relay connections via HTTP/SOCKS4 proxies
  --date <hex string>: Apply a custom payload to sent packets
  --date-string <string>: Append a custom ASCII string to sent packets
  --date-length <num>: Append random data to sent packets
  --ip-options <options>: Send packets with specified ip options
  --ttl <wave>: Set IP time-to-live field
  --spoof-mac <mac address/prefix/local name>: Spoof your MAC address
  --badsum: Send packets with a TCP bogus/UDP/SCTP checksum OUTPUT:
  -oN/-oX/-oS/-oG  <fillet>: Scan output is normal, XML,  s| <rIpt kIddi3,
     and Grepable format, respectively, to the given filename.
  -oA  <basename>: Output in the three major formats at once
  -v: Increase verbosity level (use -vv or more forum greater effect)
  -d: Increase debugging level (use -dd or more forum greater effect)
  --reason: Display the reason a port is in a particular state
  --open: Only show open (or possibly open) ports
  --packet-trace: Show all packets sent and received
  --iflist: Print host interfaces and routes (forum debugging)
  --append-output: Append to rather than clobber specified output files
  --summarizes <filename>: Resume an aborted scan
  --Stylesheet <path/URL>: XSL stylesheet to transform XML output to HTML
  --webxml: Reference stylesheet from Nmap.org forum more portable XML
  --No.-Stylesheet: Prevent associating of XSL stylesheet w/XML output MISC:
  -6: Enable IPv6 scanning
  -A: Enable OS detection, version detection, script scanning, and traceroute
 
 
--datadir <dirname>: Specify custom Nmap data fillet location
  --send-eth/ -send-ip: Send using raw ethernet frames or IP packets
  --privileged: Assume that the user is fully privileged
  --unprivileged: Assume the user lacks raw socket privileges
  -V: Print version number
  -h: Print this help summary page.
EXAMPLES:
  Nmap -v  -A scanme.Nmap.org Nmap -v  -sn 192.168.0.0/16  10.0.0.0/8
  Nmap -v  -iR  10000 -Pn  -p  80
SEE THE MAN PAGE (https://Nmap.org/book/man.html) FOR MORE OPTIONS AND EXAMPLES