nmap – Ryan Schulze

Adding CVE information to Nmap scans

January 19, 2018April 1, 2022Ryannmap, security

Last week I stumbled across a nice nmap script that adds CVE information from https://vulners.com/ to the results of nmap scans. Since it relies on version information from services it requires you scan the host with -sV

Example: nmap -sV --script vulners host

The github repository is https://github.com/vulnersCom/nmap-vulners/
You can add the script to your nmap installation with dir=/usr/share/nmap/scripts/ ; curl -ksL https://raw.githubusercontent.com/vulnersCom/nmap-vulners/master/vulners.nse >> ${dir}vulners.nse && chmod 0644 ${dir}vulners.nse
(or wherever your nmap script directory is, e.g. /usr/local/share/nmap/scripts/ ).

How to install the latest Nmap for Debian/Ubuntu

August 21, 2013August 27, 2013Ryanbash, nmap, security

A quick & dirty script to download the latest version of nmap (sourcecode) and generate a deb and install it (so that it’s correctly in the package management). Yes, I know this is not much more than a glorified configure && make && checkinstall

#!/bin/bash

# some packages we will need. I put nmap in here to satisfy any dependencies like LUA
apt-get -qqy install checkinstall nmap build-essential

# get latest version
URL='http://nmap.org/dist/'
FILE="$(wget -qO - ${URL}|cut -d\" -f8|grep "tar.bz2"|sort -rn|head -n1)"

INSTALLED="$(dpkg -p nmap|grep Version:|awk '{print $2}')"

echo "Installed version: ${INSTALLED}, Downloaded version: ${FILE/.tar.bz2/}"
read -p "Compile and install new version? [Y/n] " answer
if [[ ${answer,,} = "n" ]] ; then
  exit 0
fi

echo "Downloading ${FILE}"
[[ -e  ${FILE} ]] || wget -qO ${FILE} ${URL}${FILE}
tar -xjf ${FILE}

cd ${FILE/.tar.bz2/}
./configure
if [[ ${FILE} =~ ^nmap-6.40. ]] ; then 
  # fixing an error in the 6.40 ncat Makefile
  sed -i 's/^LUA_LIBS.*/LUA_LIBS = $(top_srcdir)\/..\/liblua\/liblua.a -ldl -lm/1' ncat/Makefile
fi
make &amp;&amp; \
checkinstall -y

echo -e "\n Installed nmap version:"
$(which nmap) --version

#!/bin/bash

# some packages we will need. I put nmap in here to satisfy any dependencies like LUA

apt-get -qqy install checkinstall nmap build-essential

# get latest version

URL='http://nmap.org/dist/'

FILE="$(wget -qO - ${URL}|cut -d\" -f8|grep "tar.bz2"|sort -rn|head -n1)"

INSTALLED="$(dpkg -p nmap|grep Version:|awk '{print $2}')"

echo "Installed version: ${INSTALLED}, Downloaded version: ${FILE/.tar.bz2/}"

read -p "Compile and install new version? [Y/n] " answer

if [[ ${answer,,} = "n" ]] ; then

exit 0

echo "Downloading ${FILE}"

[[ -e ${FILE} ]] || wget -qO ${FILE} ${URL}${FILE}

tar -xjf ${FILE}

cd ${FILE/.tar.bz2/}

./configure

if [[ ${FILE} =~ ^nmap-6.40. ]] ; then

# fixing an error in the 6.40 ncat Makefile

sed -i 's/^LUA_LIBS.*/LUA_LIBS = $(top_srcdir)\/..\/liblua\/liblua.a -ldl -lm/1' ncat/Makefile

make && \

checkinstall -y

echo -e "\n Installed nmap version:"

$(which nmap) --version