nmap-scripts (NSE)

Use Nmap Scripting Engine categories / scripts.

$ nmap --script-help vuln
$ nmap --script "default,safe" -sV host
$ nmap --script http-enum -p 80,443 host
$ nmap --script smb-vuln* -p 445 host