20. Vulnerability Scanning and Assessment
20.3 Nmap Vulnerability Scripts
Nmap cha NSE engine quick vulnerability check sathi pan vaparta yeto. He full scanner nahi, pan pahila andaj milto.
sudo nmap -sV --script vuln 192.168.56.20 -oA 20_nmap_vuln # all 'vuln' category scripts
sudo nmap -p 21 --script ftp-vsftpd-backdoor 192.168.56.20 # one specific check
sudo nmap -p 445 --script smb-vuln* 192.168.56.20 # all SMB vulnerability scripts
sudo nmap -sV --script vulners 192.168.56.20 # match versions to CVEs (needs internet on Kali)
Output shows lines such as State: VULNERABLE with the CVE and references. vulners lists CVEs with CVSS scores for each detected version.
Ravindra Bagale's Tip
--script vuln ne "VULNERABLE" nahi dakhavla mhanje system surakshit aahe asa nahi. Nmap scripts faqt kahi thodya known bugs check kartat. Full picture sathi OpenVAS sarkha proper scanner laagto – ha farak lakshat theva.
Lab
Run sudo nmap -sV --script vuln 192.168.56.20 -oA 20_nmap_vuln. List every finding marked VULNERABLE, with its CVE. Compare this list with your searchsploit table from 20.2.