Create Your Own Nmap Scripts Using Lua [Tutorial]

How to Code in Lua to Create Nmap Scripts

Nmap is a powerful tool for network scanning and analysis. On this episode of Cyber Weapons Lab, we'll teach you how to use Lua to code out your own Nmap script to run, that way you're not always relying on other hackers and pentesters' scripts to get a job done.

Follow Null Byte on:

[sarundayo]

"This terrible terrible travel site." I died 😂😂😂

[Dave-kqgv]

Great vid as always amigo! Lua is cool: it's also the 'preferred' scripting language of wireshark & can be used in real time with nodeMCUs. I'm glad to see the lang get some luv 💖💖

[xg]

This was a great beginner tutorial. How can I perform a new scan based on the results from the original scan in my LUA/NSE script?

[cosky]

Best video ever made.I love Lua. Can you explain how wireshark is made with lua ?

[dsbros]

Just Awesome !!!
I am quite lucky that I came across your channel. Liked and subscribed.
Clear, crisp, & perfect explanation. Keep making such videos bro !!

[shit]

function sort(a, b)
return a > b and a or b
end
:)

[Hackaholics]

only video on youtube without a dislike !!!

[DRTDC]

Love ur intro mate!
Great video, cheers!!

[mayhem]

how do i modify allready existing scripts

[dewaynewhite]

Hello when im using free Wi-Fi with a proxy how do i get to the server of other stores HELP 😎😬😨😄

[AbdulRaufFawwazKhan]

Can you also use python3 instead of Lua?

[dayanira.]

So i can learn lua instead of python for example? I mean, can i do all the things with lua that i can do in python3? :)

[killivalavan]

Bro in my vmware kalilinux does not show its wifi Option it shows only wire connection
how to solve it

[redpilledpatriot]

The commands I used:
1. "nmap -p80, 443 --script dns-brute priceline.com": I am searching ports 80 and 443 on priceline.com and I also added a script to be run after the command is executed, with this DNS brute-forcing script I should get a lot more information about the target.


3. function sort (a, b)

if a > b then

return a

else

return b

end

end



print("Enter two numbers")

a = io.read()

b = io.read()

print(sort(a, b))

4. "cd /usr/share/nmap/scripts": This command will put me inside of the scripts folder which is inside another folder called nmap.

5. "nano testy.nse": This command will open a nano window, this is where I'll write my script.

6. -- HEAD --



description = [[

This is a simple script example that determines if a port is open.

]]



author = "Null Byte"



-- RULE --



portrule = function(host, port)

return port.protocol == "tcp"

and port.state == "open"

end



-- ACTION --



action = function(host, port)

return "This port is open!"

end

7. "ls": This command will allow me to see all of the nmap scripting engines within the scripts folder.

8. "nmap -p80, 443 --script testy priceline.com": I added the nmap script that I wrote to this command, this script has it's own logic that is dependent on the result of the ports I choose to scan.

[faizankhd]

how to find webserver version using Lua script

[smtech]

make.more video about userland....pls sir

[mgntic]

This is why roblox is really easy to exploit

[thecuriousone]

Hey can you guys make a detailed video explaining how to root android devices.. there are a few tutorials but most of them don't work..

[erosdonchev]

Show us some Windows hacking please :)