Nmap HTTP
AI-generatedSummary
Execute an Nmap scan on a specified target host or IP address via an internal HTTP Nmap service, allowing manual or AI-assisted profile selection and customizable scanning parameters.
Inputs
- Base URL (required) — Base URL of the internal Nmap HTTP service (without the /nmap suffix).
- Target (required) — Host or IP address to scan, e.g., "8.8.8.8" or "scanme.nmap.org".
- Profile Source (required) — Choose whether to select the Nmap scan profile manually or allow AI to select it based on the node's context.
- Profile — Manually choose a predefined Nmap profile to use for the scan (ignored if Profile Source is AI).
- NSE Scripts — Optional comma-separated list of NSE scripts or categories to run during the scan.
- Ports — Optional list or range of ports to scan, formatted as "80,443" or "1-1024".
- Scan Type (required) — Basic Nmap scan type, such as SYN Stealth, Connect, UDP, Ping Sweep, or No Ping.
- Timing Template (required) — Nmap timing template to tune scan speed and stealth.
- Enable OS Detection (required) — Enable detection of the target's operating system (-O option).
- Enable Service Version Detection (required) — Enable detection of service versions (-sV option).
- Max Retries — Optional maximum number of retries during scanning, translated to --max-retries N (0 to omit).
- Host Timeout — Optional per-host timeout in milliseconds, translated to --host-timeout Nms (0 to omit).
- Extra Args — Optional additional manual arguments appended to the Nmap command.
- Output Format (required) — Select how to return the service response: raw text, array of lines, full JSON response, or parsed JSON ports data.
Output shape
a list of JSON objects, one per execution input item
Each output item contains the scan result formatted according to the chosen Output Format parameter. Additional metadata about the scan parameters, request URL, and service response flags are included under the _meta field. The parsed ports output includes an array of port objects with port, protocol, state, and service information extracted from the raw scan output. Errors and response codes from the HTTP service are included when applicable.
Examples
Example 1: Scan target 8.8.8.8 using the 'fast' profile with OS detection enabled, returning parsed ports JSON.
Set Base URL to the service endpoint, Target to '8.8.8.8', Profile Source to 'manual', Profile to 'fast', Enable OS Detection true, Output Format to 'ports'.