← All Kali Commands
🔍 Reconnaissance Nmap

Vulnerability script scan

Nmap command for vulnerability script scan. Copy the command below and use it in your terminal.

nmap — terminal
┌──(kali㉿kali)-[~]
└─$ nmap --script vuln target
Tool
Nmap
Category
Reconnaissance
Purpose
Vulnerability script scan

🛡️ Usage Tips

  • Always ensure you have proper authorization before using Nmap against any target
  • Replace target with the actual IP address or hostname you are testing
  • Run this command from a Kali Linux terminal or any system with Nmap installed
  • Combine with other Nmap commands for more comprehensive results
  • Pipe output to a file with > output.txt for later analysis

🔗 More Nmap Commands

nmap -sn 192.168.1.0/24
Host discovery ping sweep
nmap -sV -sC -p- target
Full port scan with scripts
nmap -sS -T4 -p 1-65535 target
SYN stealth scan all ports
nmap -sU -p 1-1000 target
UDP scan top 1000 ports
nmap -O target
OS fingerprinting
nmap -sV --script=banner target
Banner grabbing
nmap -Pn -sV target
No-ping scan (bypass firewall)
nmap -sS -D RND:10 target
Decoy scan with random IPs
nmap -f target
Fragment packets for IDS evasion
nmap --script smb-vuln* target
SMB vulnerability scan
nmap -sV -p 443 --script ssl-enum-ciphers target
SSL cipher enumeration
nmap -oA scan_results target
Output all formats

🔍 Other Reconnaissance Tools

Masscan RustScan Amass Subfinder DNSrecon theHarvester
📚 Learn Kali Linux — Free Course