The test results for NMAP may be difficult to understand and take time to interpret for non-security professionals. The purpose of integration with BDD and NMAP allows us to define the NMAP execution in plain English. In this example, we will use NAMP to execute some common web security tests with an NMAP NSE (NMAP Scripting Engine) script. Due to the execution of NMAP and the scanning results can be difficult to interpret, we will apply the Gauntlt framework to execute NMAP. Please be reminded that NAMP web security testing cannot replace a web scanner such as ZAP, due to the limitations of the security payloads and detection engine of NMAP.
NMAP security scan with BDD framework
NMAP For web security testing
We will be using...