> For the complete documentation index, see [llms.txt](https://doubtfulturnip.gitbook.io/dts-cybersecurity-tool-kit/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doubtfulturnip.gitbook.io/dts-cybersecurity-tool-kit/tools-list/security-tool-plugins-and-scripts/nmap.md).

# Nmap

###

{% embed url="<https://github.com/whickey-r7/grab_beacon_config>" %}
Attempts to pull configs from Cobalt Strike Beacons
{% endembed %}

{% embed url="<https://svn.nmap.org/nmap/scripts/dns-brute.nse>" %}
Attempts to enumerate DNS hostnames by brute force guessing of common subdomains
{% endembed %}

{% embed url="<https://svn.nmap.org/nmap/scripts/http-backup-finder.nse>" %}
Spiders a website and attempts to identify backup copies of discovered files
{% endembed %}

{% embed url="<https://svn.nmap.org/nmap/scripts/mongodb-databases.nse>" %}
Attempts to get a list of tables from a MongoDB database
{% endembed %}

{% embed url="<https://svn.nmap.org/nmap/scripts/shodan-api.nse>" %}
Queries Shodan API for given targets and produces similar output to a -sV nmap scan
{% endembed %}

{% embed url="<https://svn.nmap.org/nmap/scripts/http-rfi-spider.nse>" %}
Crawls webservers in search of RFI (remote file inclusion) vulnerabilities
{% endembed %}

{% embed url="<https://nmap.org/nsedoc/scripts/http-exif-spider.html>" %}
Spiders a site's images looking for interesting exif data embedded in .jpg files
{% endembed %}

{% embed url="<https://github.com/CronUp/Vulnerabilidades/blob/main/proxynotshell_checker.nse>" %}