scipag/vulscan

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

3780 stars · 692 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Vulscan is an Nmap NSE script that turns Nmap into a vulnerability scanner by matching version-detected services against offline vulnerability databases like VulDB and CVE. It is written in Lua and ships with pre-installed, regularly updated database files.

Use cases

• scan a host for known vulnerabilities with nmap
• identify CVEs for services detected by nmap version scanning
• run offline vulnerability assessment without internet access
• match service versions against VulDB or Exploit-DB entries
• extend nmap with custom vulnerability databases

When to choose

• you already use nmap and want vulnerability lookups in the same workflow
• you need offline vulnerability scanning without cloud services
• you want to correlate nmap -sV version detection with public CVE databases

When to avoid

• you need a full standalone vulnerability scanner with agent-based or authenticated scanning
• you require active exploitation or verified proof-of-concept testing
• you need scheduled enterprise-wide scanning with reporting dashboards

Facets

plugin · maturity active

vulnerability-scanning security penetration-testing cli security penetration-testing developer-tools windows cli nmap nse vulnerability-database offline-lookup lua linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="scipag/vulscan")