Using Scripts with Nmap

In this lesson, we’ll delve deeper into the NSE and look at a few common NSE scripts used during a pen testing audit.

Script categories

The NSE groups its scripts into different categories to make it easier for users to select scripts based on their goals. The categories are as follows:

• Default: These scripts are considered useful for basic scanning and are safe to run. These are the scripts that run when we use the -sC flag or --script=default.

• Safe: These scripts are classified as nonintrusive and unlikely to crash services or systems.

• Intrusive: These scripts are more aggressive and might be risky to run against target networks.

• Discovery: These scripts are useful for discovering more about the network. This can include enumerating users, ...