The Nmap Scripting Engine (NSE) provides a large number of scripts that can be used to perform a range of automated tasks to evaluate remote systems. The existing NSE scripts that can be found in Kali are classified into a number of different categories, one of which is vulnerability identification.
Vulnerability scanning with the Nmap Scripting Engine
Getting ready
To perform vulnerability analysis with NSE, you will need to have a system that is running network services over TCP or UDP. In the example provided, a Windows XP system with a vulnerable SMB service is used for this task. For more information on setting up a Windows system, refer to the Installing Windows Server recipe in Chapter 1, Getting Started.