diff --git a/docs/scripting.xml b/docs/scripting.xml index 6869e6fd7..5bd509562 100644 --- a/docs/scripting.xml +++ b/docs/scripting.xml @@ -13,7 +13,7 @@ growing and diverse set of scripts distributed with Nmap, or write their own to meet custom needs. - Tasks we had in mind when creating the system include: + NSE was designed to be versatile so these are some of the tasks we had in mind when creating the system: @@ -36,11 +36,11 @@ is able to recognize thousands of different services through its probe and regular expression based matching system, but it cannot recognize everything. For example, identifying the Skype v2 service requires two - independent probes. Nmap could also recognize more SNMP services + independent probes which version detection isn't flexible enough to handle. Nmap could also recognize more SNMP services if it tried a few hundred different community names by brute force. Neither of these tasks are well suited to traditional - Nmap version detection, but both are easily accomplished with - NSE. For these reasons, version detection now calls NSE by + Nmap version detection but are particularly easy accomplish with + NSE. Because of this, version detection now seamlessly calls NSE by default to handle some tricky services. This is described in . @@ -55,7 +55,12 @@ When a new vulnerability is discovered, you often want to scan your networks quickly to identify vulnerable systems before the bad guys do. While Nmap isn't a - comprehensive vulnerability scanner, we plan to distribute scripts for some very severe or common vulnerabilities and misconfigurations. + comprehensive vulnerability scanner, + NSE is powerful enough to handle even demanding vulnerability + checks. A few vulnerability detection scripts have already been + written and we plan to distribute additional scripts for very severe + or common vulnerabilities and misconfigurations. + @@ -72,7 +77,7 @@ posted an Nmap version detection probe and signature so that others could quickly scan their networks. For more complex worms and backdoors, NSE is needed - instead. + for reliable detection. @@ -80,7 +85,7 @@ Vulnerability exploitation - As a general scripting language, NSE could even + As a general scripting language, NSE can even be used to exploit vulnerabilities rather than just find them. The capability to add custom exploit scripts may be valuable for some people (particularly