Build a Port Scanning and Exploit Identification Tool

Traditional port scanners like Nmap identify open ports and services, but lack contextual risk awareness. By linking discovered services to CVEs or known exploits, this tool helps prioritize vulnerabilities and understand potential entry points for attackers.

The tool scans target systems for open TCP/UDP ports, fingerprints the running services (e.g., Apache, MySQL), and queries public vulnerability databases to highlight relevant CVEs, including links to known exploits or Metasploit modules.

The scanner runs TCP/UDP port scans and captures response headers. Detected services are parsed to extract names and versions. These are sent to vulnerability databases via API calls. The result is a risk-focused scan that lists possible exploits alongside port details.

• Scan specified IP address or hostname using Nmap, socket, or Scapy-based scanner.
• Use banner grabbing or Nmap scripting to detect software version (e.g., Apache 2.4.29).
• Query CVE databases with software/version and retrieve potential exploit entries.
• Display open ports with associated risks, CVE IDs, severity, and remediation links.
• Export a vulnerability report as PDF or HTML for offline sharing or archiving.

• Nmap Documentation
• Vulners API for CVE Lookup
• National Vulnerability Database (NVD)
• python-nmap Library
• ExploitDB for Manual Research