20. Vulnerability Scanning and Assessment
20.3 Nmap Vulnerability Scripts
Nmap cha NSE engine quick vulnerability check sathi pan vaparta yeto. He full scanner nahi, pan pahila andaj milto.
sudo nmap -sV --script vuln 192.168.56.20 -oA 20_nmap_vuln # all 'vuln' category scripts
sudo nmap -p 21 --script ftp-vsftpd-backdoor 192.168.56.20 # one specific check
sudo nmap -p 445 --script smb-vuln* 192.168.56.20 # all SMB vulnerability scripts
sudo nmap -sV --script vulners 192.168.56.20 # match versions to CVEs (needs internet on Kali)
Output shows lines such as State: VULNERABLE with the CVE and references. vulners lists CVEs with CVSS scores for each detected version.
Ravindra Bagale's Tip
If --script vuln does not show "VULNERABLE", that does not mean the system is secure. Nmap scripts check only a small number of known bugs. For the full picture you need a proper scanner like OpenVAS – remember this difference.
Ravindra Bagale's Tip – मराठी
--script vuln ने "VULNERABLE" दाखवलं नाही म्हणजे system सुरक्षित आहे असं नाही. Nmap scripts फक्त थोडेच known bugs check करतात. Full picture साठी OpenVAS सारखा proper scanner लागतो – हा फरक लक्षात ठेवा.
Ravindra Bagale's Tip – हिंदी
--script vuln ने "VULNERABLE" नहीं दिखाया तो इसका मतलब यह नहीं कि system सुरक्षित है. Nmap scripts सिर्फ़ कुछ गिने-चुने known bugs check करते हैं. Full picture के लिए OpenVAS जैसा proper scanner चाहिए – यह फ़र्क याद रखो.
Lab
Run sudo nmap -sV --script vuln 192.168.56.20 -oA 20_nmap_vuln. List every finding marked VULNERABLE, with its CVE. Compare this list with your searchsploit table from 20.2.