Scanning Tools

After reconnaissance, scanning helps identify vulnerabilities and services.

Port Scanning

Nmap

Industry-standard port scanner:

cyberstrike> Scan example.com with nmap for open ports and services

Common scan types:

• -sV - Service version detection
• -sC - Default scripts
• -A - Aggressive scan (OS detection, scripts, traceroute)

Masscan

High-speed port scanner:

cyberstrike> Use masscan to quickly scan all ports on 192.168.1.0/24

Vulnerability Scanning

Nuclei

Template-based vulnerability scanner:

cyberstrike> Run nuclei against example.com focusing on critical vulnerabilities

Template categories:

• CVEs
• Misconfigurations
• Exposures
• Technologies

Nikto

Web server scanner:

cyberstrike> Scan the web server at example.com with nikto

SSL/TLS Analysis

SSLyze

SSL/TLS configuration testing:

cyberstrike> Analyze SSL configuration of example.com