Nmap
HTTPS testing
# nmap --script ssl-enum-ciphers -p 443 192.168.1.1
# nmap --script ssl-dh-params -p 443 192.168.1.1
# nmap --script ssl-cert -p 443 192.168.1.1
SSH
# nmap --script ssh2-enum-algos -p 22 192.168.1.1
# nmap --script ssh-auth-methods -p22
# nmap --script ssh-publickey-acceptance -p22
SMB
# nmap -p 139,445 --script smb-protocols 192.168.1.1
-- @output
-- | smb-protocols:
-- | dialects:
-- | NT LM 0.12 (SMBv1) [dangerous, but default]
-- | 2.0.2
-- | 2.1
-- | 3.0
-- | 3.0.2
-- |_ 3.1.1
SNMP
# nmap -sU -p161 --script=snmp-info 192.168.1.11
# nmap -sU -p161 --script=snmp-brute 192.168.1.12
# nmap -sU -p 161 -sV -sC 192.168.1.13 # All SNMP Infos: