Vscan – Vulnerability Scanner Tool Using Nmap And NSE Scripts in Kali Linux

Vscan is a free and open-source tool available on GitHub. Vscan has based nmap scanning techniques, the easiest and useful tool for reconnaissance. Vscan interface is very similar to Metasploit 1 and Metasploit 2. Vscan has its own modules that add additional value to the standard scanner which is nmap. Vscan has NSE scripts that give additional features to nmap to detect and find vulnerabilities and further which can be used to perform exploitation.  Nse scripts have many modules such as network discovery and backdoor detection. This tool provides a command-line interface that you can run on Kali Linux. This tool can be used to get information about our target(domain) which can be a website or an IP address. The interactive console provides a number of helpful features, such as command completion and contextual help. Vscan is a web reconnaissance tool written in bash script. It has so many modules such as database interaction, built-in convenience functions, NSE scripts interactive help, and command completion. Vscan provides a powerful environment in which open source web-based reconnaissance can be conducted and you can gather all information about the domain or ip address with ports.

Features of NSE scripts

• It can be used with nmap for network discoveries on ports.
• It can give more sophisticated versions in-network detection.
• It can be used to detect vulnerability detection.
• It can be used for backdoor detection on host/victim IP addresses.
• It can be used to exploit vulnerabilities in the network.

Installation of Vscan

Step 1: Open your kali linux operating system terminal and use the following command in order to install the tool. Use the second command to move into the directory of the Vscan.

git clone https://github.com/xen0vas/vscan.git
cd vscan

Step 2: Now use the following command to list out the contents of the tool.

ls

Step 3. The tool has been successfully installed now use the following command to run the tool.

./vscan.sh

The tool is running successfully now we will see examples to use the tool.

Usages

Example 1: Use the vscan tool to scan an IP address.

./vscan.sh 192.168.162.90 http 80

The tool has started scanning the given IP address.

In this way, the tool will give a report of scanning.

Example 2: Use the vscan tool to scan another IP address.

./vscan.sh 192.168.162.10-90 http 80

Vscan automates the Nmap vulnerability scanner using NSE scripts.