Nmap Scripting Engine
911 views 
The Nmap Scripting Engine (NSE) is one of Nmap's most powerful and flexible features. It allows users to write (and share) simple scripts to automate a wide variety of networking tasks. Those scripts are then executed in parallel with the speed and efficiency you expect from Nmap. Users can rely on the growing and diverse set of scripts distributed with Nmap, or write their own to meet custom needs.
Scripts are written in the embedded LUA programming language.
NSE is enabled with the -sC option (or --script if you wish to specify a custom set of scripts) and results are integrated into Nmap normal and XML output. Two types of scripts are supported: service and host scripts. Service scripts relate to a certain open port (service) on the target host, and any results they produce are included next to that port in the Nmap output port table.
Snort + NMAP = New Scanner
Snort creator, Sourcefire, Inc. and Insecure.Org, the creator of the Nmap Security Scanner, today announced a licensing agreement for the parties to jointly develop open source vulnerability scanning technology based on the general purpose Nmap Scripting Engine (NSE) embedded within the popular Nmap network discovery tool.
Under the agreement, Insecure.Org will develop the engine while the Sourcefire Vulnerability Research Team (VRT) will develop and contribute plug-ins for discovering specific vulnerabilities.
“Sourcefire was built on the premise of combining open source technologies with proprietary innovation and funded research to produce world-class solutions for our customers,” said Martin Roesch, Sourcefire’s Chief Technology Officer and the original author of Snort.
“This joint effort exemplifies the spirit of the open source community, combining Insecure.Org’s active scanning expertise with Sourcefire’s vulnerability research capabilities to deliver a powerful new open source scanning technology. As open source leaders and innovators, both of our organisations are dedicated to providing users with the best possible technology to address their security issues, and we are very excited by the capabilities that this relationship will deliver.”
---- [ http://www.net-security.org/secworld.php?id=5183 ]
Post new comment