There are no security operating distributions without nmap. So far, we have discussed how to utilize nmap during active reconnaissance, but attackers don't just use nmap to find open ports and services, but also engage nmap to perform the vulnerability assessment. As of March 10, 2017, the latest version of nmap is 7.40 and it ships with 500+ NSE (nmap scripting engine) scripts, as shown in the following screenshot:
Penetration testers utilize nmap's most powerful and flexible features, which allows them to write their own scripts and also automate them to ease the exploitation. The NSE was primarily developed for the following reasons:
- Network discovery: The primary purpose that attackers would utilize nmap for is network discovery, as we learned in the active reconnaissance section in Chapter 3, Active Reconnaissance of External and...
