Vulnerability scan with Nmap

Nmap-vulners (CVE) Installation

cd /usr/share/nmap/scripts/

git clone https://github.com/vulnersCom/nmap-vulners.git

cd /usr/share/nmap/scripts/ ls ile yuklenen scripts goruntuleyebilirsin.

Nmap-vulners scan (CVE)

nmap -sV --script vulners [--script-args mincvss=<arg_val>] <target>

nmap -sV --script nmap-vulners/ <target>

map -sV --script nmap-vulners/ <target> -p80,223

Nmap – vuln NSE Scan

nmap -sV --script vuln <target>

Nmap-vulscan veritabanları;

• exploitdb.csv
• osvdb.csv
• securitytracker.csv
• openvas.csv
• scipvuldb.csv
• xforce.csv
• securityfocus.csv
• cve.csv

Installation

cd /usr/share/nmap/scripts/

git clone https://github.com/scipag/vulscan.git

ln -s `pwd`/scipag_vulscan /usr/share/nmap/scripts/vulscan 

cd vulscan/utilities/updater/

chmod +x updateFiles.sh

 ./updateFiles.sh

nmap -sV --script vulscan <target>
--script-args vulscandb=database_name
nmap -sV --script vulscan --script-args vulscandb=exploit.csv <target> -p 80,233

SCRIPT SCAN:
-sC: equivalent to –script=default
–script=: is a comma separated list of
directories, script-files or script-categories
–script-args=: provide arguments to scripts
–script-args-file=filename: provide NSE script args in a file
–script-trace: Show all data sent and received
–script-updatedb: Update the script database.
–script-help=: Show help about scripts.
is a comma-separated list of script-files or
script-categories.

nmap -sV --script http-vuln-cve2013-0156 <target-address>
nmap -sV --script http-internal-ip-disclosure <target>