11

I've just installed the latest Kali and updated everything. nmap is version 7.12.

I've noticed that smb-check-vulns.nse is not present. As far as I can tell, most other scripts I use are there but I've got an exam coming up and I don't want any bad surprises.

I tried to manually add smb-check-vulns.nse by fetching the script source from nmap.org, but that gave me some errors and the script is not running.

Was there a change that deprecated some scripts recently, or am I the only one experiencing a missing script? Is there any way to ensure I have all nmap scripts installed?

Improve this question
3
  • Did you run `nmap --script-updatedb' like the documentation suggests?
    – atdre
    Apr 8, 2016 at 6:59
  • @atdre I did but that doesn't seem to have added any scripts it didn't already have. I have a lot of the scripts, but I seem to be missing a few key ones. It didn't give me smb-check-vulns.
    – Juicy
    Apr 8, 2016 at 10:36
  • 1
    nmap.org/nsedoc/categories/vuln.html lists the active scripts. It also shows the replacements to smb-check-vulns
    – schroeder ♦
    Apr 9, 2016 at 4:54

4 Answers 4

Reset to default
19

The changelog for Nmap 6.49BETA6 says:

[GH#171] smb-check-vulns has been split into: 
    smb-vuln-conficker
    smb-vuln-cve2009-3103
    smb-vuln-ms06-025
    smb-vuln-ms07-029
    smb-vuln-regsvc-dos
    smb-vuln-ms08-067
The scripts now use the vulns library, and the "unsafe" script-arg has been replaced by putting the scripts into the "dos" category. [Paulino Calderon]
Improve this answer
9

Basically just run --script vuln instead of --script smb-check-vulns

and you will get your results.

In the latest NMAP versions "vuln" is a category that has all vulnerabilities in them instead of a separate smb-check-vulns command.

Improve this answer
3

Lisen to Paulino Calderon (we have develop many nse scripts to nmap).

See this video here showing how to port nse scripts and libs to nmap database: https://www.youtube.com/watch?v=ARuIQDDXrBg

you can use script 'categories' to run all scripts inside that categorie, example: nmap --script dos (will run all scripts inside categorie dos) https://nmap.org/nsedoc/

About --script-updatedb switch ... it DOES NOT retrieve anything from network (updates), that switch serves to manually update nmap database if you are locally developing nse scripts or libs to nmap ...

Improve this answer
1
  • You may be answering the question, but your answer is very confusing. You add a link and then assume that people would perfectly understand what is in the video, link die, therefore it is much better to add a summary here. Moreover, you then say that updatedb does not retrieve anything from the network but does something locally. Yet, you do not provide an example of either.
    – grochmal
    Sep 28, 2016 at 23:33
1

Alternatively, you can use the following command to check all specific vulnerabilities for SMB

 nmap -p445 --script smb-vuln-* <target>
Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .