diff --git a/docs/scripting.xml b/docs/scripting.xml
index 6869e6fd7..5bd509562 100644
--- a/docs/scripting.xml
+++ b/docs/scripting.xml
@@ -13,7 +13,7 @@
growing and diverse set of scripts distributed with Nmap, or write
their own to meet custom needs.
- Tasks we had in mind when creating the system include:
+ NSE was designed to be versatile so these are some of the tasks we had in mind when creating the system:
@@ -36,11 +36,11 @@
is able to recognize thousands of different services through
its probe and regular expression based matching system, but it
cannot recognize everything. For example, identifying the Skype v2 service requires two
- independent probes. Nmap could also recognize more SNMP services
+ independent probes which version detection isn't flexible enough to handle. Nmap could also recognize more SNMP services
if it tried a few hundred different community names by brute
force. Neither of these tasks are well suited to traditional
- Nmap version detection, but both are easily accomplished with
- NSE. For these reasons, version detection now calls NSE by
+ Nmap version detection but are particularly easy accomplish with
+ NSE. Because of this, version detection now seamlessly calls NSE by
default to handle some tricky services. This is described in
.
@@ -55,7 +55,12 @@
When a new vulnerability is discovered, you often want
to scan your networks quickly to identify vulnerable systems
before the bad guys do. While Nmap isn't a
- comprehensive vulnerability scanner, we plan to distribute scripts for some very severe or common vulnerabilities and misconfigurations.
+ comprehensive vulnerability scanner,
+ NSE is powerful enough to handle even demanding vulnerability
+ checks. A few vulnerability detection scripts have already been
+ written and we plan to distribute additional scripts for very severe
+ or common vulnerabilities and misconfigurations.
+
@@ -72,7 +77,7 @@
posted an Nmap version detection probe and
signature so that others could quickly scan their networks.
For more complex worms and backdoors, NSE is needed
- instead.
+ for reliable detection.
@@ -80,7 +85,7 @@
Vulnerability exploitation
- As a general scripting language, NSE could even
+ As a general scripting language, NSE can even
be used to exploit vulnerabilities rather than just find them.
The capability to add custom exploit scripts may be valuable
for some people (particularly