> For the complete documentation index, see [llms.txt](https://security.navidnaf.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://security.navidnaf.com/ollivanders/metasploit-framework/vulnerability-scanning.md).

# Vulnerability Scanning

```bash
# Basic Setup
setg [HOST]
workspace -a [suitable-name]

# nmap for basic recon
db_nmap -sS -sV -O [HOST]
hosts
services
```

## **Searching for Exploits**

{% code overflow="wrap" %}

```bash
# Manual Exploit Search
search type:exploit name:[name]
# Searches for relevant exploits based on the detected services. This process can be time-consuming.

# Searchsploit
searchsploit [name]
# Uses the searchsploit tool to find local exploit suggestions based on the service names.
```

{% endcode %}

### Eternal Blue Exploit

{% code overflow="wrap" %}

```bash
# Scan for vulnerability
use scanner/smb/smb_ms17_010

# Attempt to exploit
use windows/smb/ms17_010_eternalblue
```

{% endcode %}

## Automatic Exploit Matching

{% embed url="<https://github.com/hahwul/metasploit-autopwn>" %}

{% code overflow="wrap" %}

```bash
# Move the autopwn plugin
sudo mv db_autopwn.rb /usr/share/metasploit-framework/plugins

# Load the plugin
load db_autopwn

# Run the autopwn tool
db_autopwn -p -t -PI [PORT]
# This automatically scans the database and matches found services to possible exploit modules.
```

{% endcode %}

## Analyzing Vulnerabilities

{% code overflow="wrap" %}

```bash
# Auto Analysis
analyze
# Automatically analyzes open ports to determine possible exploits.

# List Vulnerabilities
vulns
# Displays a list of any vulnerabilities identified during the scan.
```

{% endcode %}