vulscan - Advanced vulnerability scanning with Nmap NSE

项目说明

- Scanning with Nmap

<p align="center">
<img src="./logo.png" width="300px">
</p>

Introduction

is a module which enhances nmap to a scanner. The nmap option -s detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline of VulDB.

!Nmap NSE

Installation

Please install the files into the following folder of your Nmap installation:

Nmap\scripts\\*

Clone the GitHub repository like this:

git clone scipag_
ln -s pwd/scipag_ /usr/share/nmap/scripts/

Usage

You have to run the following minimal command to initiate a simple scan:

nmap -s=/.nse www.example.com

Database

There are the following pre-installed databases a at the moment:

* scipvuldb.cs://vuldb.com
* cve.cs://c.org
* securityfocus.cs://www.securityfocus.com/bid/
* xforce.cs://exchange.xforce.ibmcloud.com/
* expliotdb.cs://www.exploit-db.com
* openvas.csv -
* securitytracker.cs://www.securitytracker.com (end-of-life)
* osvdb.csv - (end-of-life)

Single Database Mode

You may execute with the following argument to use a single 数据库:

--script-args =your_own_database

It is also possible to create and reference your own databases. This requires to create a 数据库 file, which has the following structure:

<id>;<title>

Just execute like you would by refering to one of the pre-delivered databases. Feel free to share your own 数据库 and connection with me, to add it to the official repository.

Update Database

The databases are updated and assembled on a regularly basis. To support the latest disclosed , keep your local databases up-to-date.

To automatically update the databases, simply set execution permissions to the update.sh file and run it:

chmod 744 update.sh
./update.sh

If you want to manually update your databases, go to the following web site and download these files:

*
*
*
*
*
*
*
*

Copy the files into your folder:

//

Detection

If the detection was able to identify the software and the 数据库 is pro such details, also this data is matched.

Disabling this feature might introduce false-positive but might also eliminate false-negatives and increase performance slighty. If you want to disable additional matching, use the following argument:

--script-args =0

detection of is only as good as Nmap detection and the 数据库 entries are. Some databases do not provide conclusi information, which may lead to a lot of false-positives (as can be seen for Apache servers).

Match Priority

The script is trying to identify the best matches only. If no positi could been found, the best possible match (with might be a false-positive) is put on display.

If you want to show all matches, which might introduce a lot of false-positives but might be useful for further in, use the following argument:

--script-args =1

Interactive Mode

The interactive mode helps you to o detection results for every port. Use the following argument to enable the interactive mode:

--script-args =1

Reporting

All matching results are printed one by line. The default layout for this is:

[{id}] {title}\n

It is possible to use another pre-defined report structure with the following argument:

--script-args =details
--script-args =listid
--script-args =listlink
--script-args =listtitle

You may enforce your own report structure by using the following argument (some examples):

--script-args ='{link}\n{title}\n\n'
--script-args ='ID: {id} - Title: {title} ({matches})\n'
--script-args ='{id} | {product} | {}\n'

Supported are the following elements for a dynamic report template:

* {id} - ID of the
* {title} - Title of the
* {matches} - Count of matches
* {product} - Matched product string(s)
* {} - Matched string(s)
* {link} - Link to the database entry
* \n - Newline
* \t - Tab

Every default 数据库 comes with an url and a link, which is used during the scanning and might be accessed as {link} within the customized report template. To use custom 数据库 links, use the following argument:

--script-args "=

Disclaimer

Keep in mind that this kind of deri scanning heavily relies on the confidence of the detection of nmap, the amount of documented and the accuracy of pattern matching. The existence of potential flaws is not with additional scanning nor exploiting techniques.

项目信息

开发语言：Lua

Star 数：3787

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Ad scanning with Nmap NSE展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。