The Profile Editor
It is common with Nmap to want to run the same scan repeatedly. For example, a system administrator may run a scan of an entire network once a month to keep track of things. Zenmap's mechanism for facilitating this is called profiles.
Each window contains a combo box labeled “Profile”. Opening it shows what profiles are available. Selecting a profile will cause the “Command” field to display the command line that will be executed. The profiles that come with Zenmap are sufficient for many scanning purposes, but sooner or later you will want to create your own.
Editing a Command
The profile editor can be used as a handy interactive Nmap command editor. Select “New Profile or Command” from under the “Profile” menu or use the ctrl+P keyboard shortcut. The profile editor will appear, displaying whatever command was shown in the main window.
The text entry at the top shows the command being edited. You can type directly in this field if you know the options you want to use. The controls in the middle let you choose options by checking boxes or selecting from menus. There is a two-way relationship between the command string and the controls: when you change one of the controls it causes an immediate change in the command string, and when you edit the command string the controls update themselves to match. Hover the mouse pointer over an option to see a description of what it does and what kind of input it expects.
To run the new command line, click the “Scan” button. This will copy the command to the main window, dismiss the profile editor, and start running the scan. To make further changes to the command, just select “New Profile or Command” again, remembering that it will use whatever command is shown on the screen.
Script selection
The “Scripting” tab deserves special mention because of
its many options. The scrolling list on the left shows all the scripts
that are installed in
script.db.
Scripts can be selected or deselected individually by clicking the
checkbox next to the script name. When a script is highlighted, its
description and arguments are displayed. The arguments are editable. Hover
the mouse pointer over an argument to see help for it.
Figure 12.11, “The “Scripting” profile editor tab” shows a sample
script selection session.
To select scripts by categories or Boolean operators, as described in
the section called “Script Selection”, edit the argument to the
--script option in the command entry at the top. The
scrolling list of selected scripts will update itself after a short delay.
Creating a New Profile
The procedure for creating a new profile is almost the same as for editing a command. Select “New Profile or Command” from the “Profile” menu and edit the command as you wish. Then, instead of clicking “Scan”, go to the “Profile” tab and give a name to the profile. Then click “Save Changes” to save the new profile.
A profile may or may not include scan targets. If you often run the same scan against the same set of targets, you will find it convenient to list the targets within the profile. If you plan to run the same scan against different targets, leave the “Targets” field blank, and fill in the targets later, when you run the scan.
Editing or Deleting a Profile
To edit a profile, select the profile you want to edit, then choose “Edit Selected Profile” from the “Profile” menu or use the ctrl+E keyboard shortcut. The profile editor will open, this time with the name and description filled from the profile selected. Click “Save Changes” to save any changes or “Cancel” to leave without saving.
When you open the profile editor using “Edit Selected Profile”, an additional “Delete” button will be present at the bottom. Zenmap will present a warning before deleting the profile.