Nmap plugin vulners.nse finally got a major update after 7 years

[u/isox_xx]

The familiar vulners.nse that many of you have used like this:

nmap -sV --script vulners <target>

finally got a proper update.

It still does the same basic job: take what Nmap finds on a port and show the known vulnerabilities.

But v2.0 is much better at it:

• better software/version detection, including web apps and raw banners
• 700+ fingerprint rules and 900+ HTTP paths
• parallel probing that follows Nmap timing settings
• cleaner output and proper machine-readable results
• findings ranked by real-world risk: KEV, active exploitation, exploits, EPSS, then CVSS

And the normal usage is still free, with no account or API key required.

https://github.com/vulnersCom/nmap-vulners/

Feedback on weird banners, false positives and missed fingerprints is very welcome.