TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Black Hills InfoSec

Vulnerability Scanning with Nmap

BHIS · 2025-07-16 · Read original ↗

ATT&CK techniques detected

7 predictions
T1046Network Service Discovery
97%
“vulnerability scanning with nmap vulnerability scanning with nmap terry is a seasoned penetration tester with a diverse background across it, cybersecurity, and military service. before joining black hills information security in 2022, he performed various roles including pentest…”
T1046Network Service Discovery
94%
“of the purpose of each option. - sc : executes the “ default ” category scripts of the nse. these scripts provide safe and useful checks for basic vulnerabilities, service metadata, ssl details, and default configurations. - sv : enables service version detection. this helps dete…”
T1046Network Service Discovery
90%
“not enabled, but this can be included depending on your scanning needs. nmap - sv - - script vuln - oa labscan - sv - vuln 192. 168. 56. 0 / 24 the screenshot below shows some of the additional vuln scripts that were run against the same windows host we scanned earlier. the host …”
T1046Network Service Discovery
54%
“##route ( - - traceroute ). this option is a powerful tool for thorough enumeration, though it is more intrusive and can be more easily detected. output from this command is shown in the following screenshots. the first image shows the output for two different services on a windo…”
T1595.002Vulnerability Scanning
47%
“to the vulners api. this is important to note if you do not have internet access from your scanning host. to invoke this script, the following syntax would be used. note that the - sv option is required for this script. nmap - sv - p - - - script vulners - oa labscan - vulners - …”
T1046Network Service Discovery
46%
“to the vulners api. this is important to note if you do not have internet access from your scanning host. to invoke this script, the following syntax would be used. note that the - sv option is required for this script. nmap - sv - p - - - script vulners - oa labscan - vulners - …”
T1046Network Service Discovery
44%
“the following command to view the scripts included in each category, with this command providing the scripts included in the vuln category. nmap - - script - help vuln the output includes details for all scripts in that category, shown in the following screenshot. each entry also…”

Summary

Nmap, also known as Network Mapper, is a commonly used network scanning tool. As penetration testers, Nmap is a tool we use daily that is indispensable for verifying configurations and identifying potential vulnerabilities.

The post Vulnerability Scanning with Nmap  appeared first on Black Hills Information Security, Inc..