Nmap: Network Exploration and Security Auditing Cookbook - Second Edition

Script selection

Users may select specific scripts when scanning using the Nmap option --script <filename or path/folder/category/expression>:

$nmap --script <filename or path/folder/category/expression> <target>  

For example, the command to run the NSE script dns-brute is as follows:

$nmap --script dns-brute <target>  

The Nmap Scripting Engine also supports the execution of multiple scripts simultaneously:

$ nmap --script http-headers,http-title scanme.nmap.org   Nmap scan report for scanme.nmap.org (74.207.244.221)    Host is up (0.096s latency).    Not shown: 995 closed ports    PORT     STATE    SERVICE    22/tcp   open     ssh    25/tcp   filtered smtp    80/tcp   open     http    | http-headers:    |   Date: Mon, 24 Oct 2011 07:12:09 GMT  | Server: Apache/2.2.14 (Ubuntu) ...