# NMAP

Nmap's script categories include, but are not limited to, the following:&#x20;

* auth: Utilize credentials or bypass authentication on target hosts.&#x20;
* broadcast: Discover hosts not included on command line by broadcasting on local network.&#x20;
* brute: Attempt to guess passwords on target systems, for a variety of protocols, including http, SNMP, IAX, MySQL, VNC, etc. default: Scripts run automatically when -sC or -A are used.
* discovery: Try to learn more information about target hosts through public sources of information, SNMP, directory services, and more.&#x20;
* dos: May cause denial of service conditions in target hosts.&#x20;
* exploit: Attempt to exploit target systems.&#x20;
* external: Interact with third-party systems not included in target list.&#x20;
* fuzzer: Send unexpected input in network protocol fields.&#x20;
* intrusive: May crash target, consume excessive resources, or otherwise impact target machines in a malicious fashion.&#x20;
* malware: Look for signs of malware infection on the target hosts.&#x20;
* safe: Designed not to impact target in a negative fashion.&#x20;
* version: Measure the version of software or protocol spoken by target hosts.&#x20;
* vul: Measure whether target systems have a known vulnerability.

<figure><img src="https://1889614651-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MYLrtG_g25xt3AUhomb%2Fuploads%2F607Ftj7m57PLQXupFmNl%2Fimage.png?alt=media&#x26;token=d3be05eb-073f-4d38-9b7b-22b548777c8d" alt=""><figcaption></figcaption></figure>

<figure><img src="https://1889614651-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MYLrtG_g25xt3AUhomb%2Fuploads%2Fa62rGzT5cOKtBrGqa7f1%2Fimage.png?alt=media&#x26;token=899f6b39-0677-4927-b142-a99b04e5e87c" alt=""><figcaption></figcaption></figure>
