Practical Web Penetration Testing

The scanner core

The core section will run the TCP scan using Nmap, then we parse the results, and finally, for all the services that are found, we call the enumerate methods that we talked about previously, as shown in the following list:

• To execute the TCP scan using Nmap, use the following:

def start_nmap_tcp_scan(ip_address):    nmap_tcp_command = "nmap -T4 -sS -sV -sC -p- -O --open --osscan-guess --version-all %s" % ip_address    nmap_tcp_output = execute_cmd ('Nmap TCP Scan', nmap_tcp_command)    #Parse the nmap scan results    service_names_list = parse_nmap_output(nmap_tcp_output)    #Start the enumeration process    start_enumeration_process(service_names_list,ip_address)    print_yellow("[!] The Program Scanner Has Finished The Execution (report saved ...