Network Mapper, notably known as NMAP, is a renowned tool in the field of security testing and ethical hacking. It contributes to scanning ports and mapping networks but can also be utilized for advancing scripts. Primarily, these scripts aid to automate certain tasks, determine specific vulnerabilities, detect intricate networking details, and extend NMAP’s effectiveness.
NMAP scripts are written in Lua language and are based on the Nmap Scripting Engine (NSE). Essentially, there are hundreds of scripts available in Nmap, aggregated in “script categories.”
To run Nmap with a script, use the following command syntax: `nmap —script [script-name] [target]`
For instance, to run an HTTP method script against a specific target: `nmap —script http-methods [target]`
Nmap scripts also support arguments. Arguments can be utilized to modify the behavior of the script. The syntax for applying arguments in Nmap scripts is `—script-args`. For instance, for the ‘smb-os-discovery’ script: `nmap —script smb-os-discovery —script-args smb-os-discovery.domain=[domain], smbios=true [target]`
Scripts can also be called based on the category. Categories include discovery, intrusive, external, safe, version, vuln etc. For instance, if one is launching scripts categorized as ‘safe’: `nmap —script=safe [target]`
Intrusive scripts can be employed with designated care. One of these scripts, ‘firewall-bypass’, aims to bypass firewalls: `nmap —script=firewall-bypass [target]`
To work with your script, you can opt to build your Nmap script and add it to the ‘/usr/share/nmap/scripts/’ directory (for Unix/Linux). After that, you need to update the Nmap script database by running `nmap —script-updatedb`.
In conclusion, Nmap scripting involves intricate yet flexible processes and extends Nmap’s potential beyond its original framework.
Sources:
1. “How to Write Scripts for Nmap,” by NetworkLessons.com, NetworkLessons.com. https://networklessons.com/cisco/ccie-routing-switching/how-to-write-scripts-for-nmap.
2. “Nmap Scripting Engine,” Nmap.org, Nmap. https://nmap.org/book/nse.html.
3. “Useful Nmap Scripting Engine scripts”, by Atle Holm, Medium.com https://medium.com/@holm.atle/useful-nmap-scripting-engine-scripts-987f54e7b72a.
