SecDB Nmap plugin retrieves known vulnerability, exploit and advisory information from the ZEN SecDB Portal (https://secdb.nttzen.cloud) from services detected by Nmap.
nmap -sV --script secdb [--script-args secdb.mincvss=<score>,secdb.url=<url>] <target>
NOTE: The script depends on having software versions at hand, so it only works with -sV flag.
The output of the Nmap is like the following:
| Argument | Description |
|---|---|
secdb.mincvss |
Filters out vulnerabilities with a CVSS score or higher |
secdb.url |
Specify SecDB URL (default https://secdb.nttzen.cloud) |
- Locate where your nmap scripts are located on your system:
- for *nix system it might be
~/.nmap/scripts/or$NMAPDIR - for Mac it might be
/usr/local/Cellar/nmap/<version>/share/nmap/scripts/ - for Windows it might be
C:\Program Files (x86)\Nmap\scripts
- for *nix system it might be
- Copy the
secdb.nsescript into that directory. - Run
nmap --script-updatedbto update the Nmap script DB
SecDB Nmap plugin uses these Nmap libraries:
- http
- json
- string
- table
- nmap
- stdnse