It is common with Nmap to want to run the same scan repeatedly. For
example, a system administrator may run a scan of an entire network
once a month to keep track of things.
Zenmap's mechanism for facilitating this is called profiles.
Each window contains a combo box labeled
“Profile”. Opening it shows what profiles are
available. Selecting a profile will cause the
“Command” field to display the command line that
will be executed. The profiles that come with Zenmap are sufficient
for many scanning purposes, but sooner or later you will want to
create your own.
The profile editor can be used as a handy interactive Nmap command
editor. Select “New Profile or Command” from
under the “Profile” menu or use the
ctrl+P
keyboard shortcut. The profile editor will appear, displaying
whatever command was shown in the main window.
The text entry at the top shows the command being edited. You can
type directly in this field if you know the options you want to use.
The controls in the middle let you choose options by checking boxes
or selecting from menus. There is a two-way relationship between the
command string and the controls: when you change one of the controls
it causes an immediate change in the command string, and when you
edit the command string the controls update themselves to match.
Hover the mouse pointer over an option to see a description of what
it does and what kind of input it expects.
To run the new command line, click the “Scan”
button. This will copy the command to the main window, dismiss the
profile editor, and start running the scan. To make further changes
to the command, just select “New Profile or Command”
again, remembering that it will use whatever command is shown on the
screen.
The “Scripting” tab deserves special mention because of
its many options. The scrolling list on the left shows all the scripts
that are installed in
script.db.
Scripts can be selected or deselected individually by clicking the
checkbox next to the script name. When a script is highlighted, its
description and arguments are displayed. The arguments are editable. Hover
the mouse pointer over an argument to see help for it.
Figure 12.11, “The “Scripting” profile editor tab” shows a sample
script selection session.
To select scripts by categories or Boolean operators, as described in
the section called “Script Selection”, edit the argument to the
--script option in the command entry at the top. The
scrolling list of selected scripts will update itself after a short delay.
The procedure for creating a new profile is almost the same as for
editing a command. Select “New Profile or Command”
from the “Profile” menu and edit the command as you
wish. Then, instead of clicking “Scan”, go to
the “Profile” tab and give a name to the profile.
Then click “Save Changes” to save the new
profile.
A profile may or may not include scan targets. If you often run the
same scan against the same set of targets, you will find it
convenient to list the targets within the profile. If you plan to
run the same scan against different targets, leave the
“Targets” field blank, and fill in the targets
later, when you run the scan.
Editing or Deleting a Profile
To edit a profile, select the profile you want to edit, then choose
“Edit Selected Profile” from the
“Profile” menu or use the
ctrl+E
keyboard shortcut. The profile editor will open, this time with the
name and description filled from the profile selected. Click
“Save Changes” to save any changes or
“Cancel” to leave without saving.
When you open the profile editor using
“Edit Selected Profile”, an additional
“Delete” button will be present at the bottom.
Zenmap will present a warning before deleting the profile.