Discovering services and vulnerabilities with Nmap scripts
In this section, we will learn how to discover services as well as perform advanced operations to collect information about a target and detect vulnerabilities in the FTP service.
Executing Nmap scripts to discover services
Nmap is an exceptional tool for performing network and service scanning tasks, but among its multiple functionalities, we find some very remarkable ones, such as the Nmap Scripting Engine (NSE).
These scripts can perform specific tests to complement the analysis and allow users to check the status of services, extract information from them, and even check vulnerabilities such as ShellShock, Poodle, or HeartBleed in specific services.
Nmap enables you to perform vulnerability assessments thanks to its powerful Lua script engine. In this way, we can also execute more complex routines that allow us to filter information about a specific target.
Nmap has a number of scripts that can help to identify...