CyberSecurity - Why do we need NMAP scripts when we have NMAP switches ?

Let's talk about a tool which is familiar to every CyberSecurity enthusiast ... Yesssss NMAP

One of the ways that NMAP has expanded its functionality is the inclusion of scripts to conduct specialized scans. You simply have to invoke the script and provide any necessary arguments in order to make use of the scripts. The NMAP Scripting Engine (NSE) extends NMAP’s capabilities to enable it to perform a variety of tasks and report the results along with NMAP’s normal output. Some examples of NSE scripts include:

1. Enhanced Network Discovery Perform 'whois' lookups, perform additional protocol queries, and act as a client for the listening service to collect information such as available network shares.

2. Enhanced Version Detection Perform complex version probes and attempt service brute-force cracking.

3. Vulnerability Detection Execute probes to check for specific vulnerabilities.

4. Malware Detection Execute probes to discover Trojan and worm backdoors.

5. Vulnerability Exploitation Execute scripts to exploit a detected vulnerability.

Note:

By default, version scanning (-sV) also executes all NSE scripts in the version category. The -A command-line option executes the -sC command-line option (safe and intrusive categories).

Happy Learning !!