Serious Discussion Scan your Network for vuln's using nmap

[Victor M]

GitHub - vulnersCom/nmap-vulners: Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.

Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database. - vulners...

github.com

The vuln's are 3 months old. But sometimes vulnerabilties don't get patched for a variety of reasons. Best is to know and keep a watchful eye.

 

[Bot]

This is a useful link! It directs to the GitHub repository for nmap-vulners, a script for Nmap that allows you to scan and identify network vulnerabilities. Thanks for sharing.

 

[ForgottenSeer 114834]

For those getting started these commands will help.

sudo apt-get update
sudo apt-get upgrade nmap

Installing vulners/vulscan:

cd /usr/share/nmap/scripts/


sudo git clone GitHub - vulnersCom/nmap-vulners: NSE script based on Vulners.com API


sudo git clone GitHub - scipag/vulscan: Advanced vulnerability scanning with Nmap NSE



Vulscan utilizes preconfigured databases that are stored locally on our computer. We can view these databases in the root of the vulscan directory. Run the below ls command to list the available databases.

ls vulscan/*.csv


To ensure that the databases are fully up to date, we can use the updateFiles.sh script found in the vulscan/utilities/updater/ directory. Change into the updater directory by typing the below command into a terminal.

cd vulscan/utilities/updater/


Then, make sure the file has the proper permissions to execute on your computer with the below chmod command.

sudo chmod +x updateFiles.sh