Nmap: gobuster (if port 80 is open)gobuster -u http://10.0.5.10 -w /usr/share/seclists/Discovery/Web_Content/common.txt -s '200,204,301,302,307,403,500' nikto -host 10.10.1.5 Check for smb vulnerabilities: for vul in $(find / -name smb*vuln*.nse | cut -d"/" -f 6); do nmap -v -p 139,445 --script=$vul -iL smb_server_all.txt; done