<?xml version="1.0" ?>
<nmap_options>
  <option 
    arg_type="str" 
    arguments="Host in standard URL notation: username:password@server:port" 
    hint="Try to use a given FTP server as proxy" 
    name="FTP bounce attack" 
    need_root="0" 
    option="-b %s"/>
          
  <option 
    arg_type="int" 
    arguments="The number of retransmissions" 
    hint="Limit the maximum number of retransmissions the port scan engine should do" 
    name="Max Retries" 
    need_root="0" 
    option="--max_retries %s"/>
          
  <option 
    arguments="" 
    hint="Try to discover firewall rulesets" 
    name="ACK scan" 
    need_root="1" 
    option="-sA"/>
          
  <option 
    arguments="" 
    hint="Stealth FIN scan mode" 
    name="FIN scan" 
    need_root="1" 
    option="-sF"/>
          
  <option 
    arg_type="str" 
    arguments="Zombie host address in the format: host[:probeport]" 
    hint="Use a zombie host to scan a given target" 
    name="Idle Scan" 
    need_root="0" 
    option="-sI %s"/>
          
  <option 
    arguments="" 
    hint="Stealth Null Scan" 
    name="Null Scan" 
    need_root="1" 
    option="-sN"/>
          
  <option 
    arguments="" 
    hint="Default TCP Scan for root user" 
    name="TCP SYN Scan" 
    need_root="1" 
    option="-sS"/>
          
  <option 
    arguments="" 
    hint="Default TCP Scan for non-root users" 
    name="TCP connect Scan" 
    need_root="0" 
    option="-sT"/>
          
  <option 
    arguments="" 
    hint="Window Scan" 
    name="Window Scan" 
    need_root="1" 
    option="-sW"/>
          
  <option 
    arguments="" 
    hint="Stealth Xmas Scan" 
    name="Xmas Tree" 
    need_root="1" 
    option="-sX"/>
          
  <option 
    arguments="" 
    hint="Scan for IP protocols" 
    name="IP protocol Scan" 
    need_root="1" 
    option="-sO"/>
          
  <option 
    arg_type="str" 
    arguments="" 
    hint="Scan for IP protocols" 
    name="IP protocol Scan with number" 
    need_root="1" 
    option="-sO -p%s"/>
          
  <option 
    arguments="" 
    hint="" 
    name="List Scan" 
    need_root="0" 
    option="-sL"/>
          
  <option 
    arguments="" 
    hint="" 
    name="Ping scanning" 
    need_root="0" 
    option="-sP"/>
          
  <option 
    arguments="" 
    hint="Slowest scan (Avoid IDS detection)" 
    name="Paranoid" 
    need_root="0" 
    option="-T Paranoid"/>
          
  <option 
    arguments="" 
    hint="Slower scan" 
    name="Sneaky" 
    need_root="0" 
    option="-T Sneaky"/>
          
  <option 
    arguments="" 
    hint="Slow scan" 
    name="Polite" 
    need_root="0" 
    option="-T Polite"/>
          
  <option 
    arguments="" 
    hint="Default scan" 
    name="Normal" 
    need_root="0" 
    option="-T Normal"/>
          
  <option 
    arguments="" 
    hint="Fast scan" 
    name="Aggressive" 
    need_root="0"
    option="-T Aggressive"/>
          
  <option 
    arguments="" 
    hint="Faster scan" 
    name="Insane" 
    need_root="0" 
    option="-T Insane"/>
          
  <option 
    arguments="" 
    hint="Try to detect version of services on scanned hosts" 
    name="Version detection" 
    need_root="0" 
    option="-sV"/>
          
  <option 
    arguments="" 
    hint="Try to detect running OS on scanned hosts" 
    name="Operating system detection" 
    need_root="1" 
    option="-O"/>
          
  <option 
    arguments="" 
    hint="" 
    name="Disable reverse DNS resolution" 
    need_root="1" 
    option="-n"/>
          
  <option 
    arguments="" 
    hint="Don't ping hosts before scanning" 
    name="Ping after Scan" 
    need_root="0" 
    option="-P0"/>
          
  <option 
    arg_type="str" 
    arguments="List of tageted ports" 
    hint="TCP ACK ping a host or network" 
    name="TCP ACK" 
    need_root="0" 
    option="-PA%s"/>
          
  <option 
    arg_type="str" 
    arguments="List of tageted ports" 
    hint="TCP SYN ping a host or network" 
    name="TCP SYN" 
    need_root="1" 
    option="-PS%s"/>
          
  <option 
    arg_type="str" 
    arguments="List of targeted ports" 
    hint="UDP probes to ping a host or network" 
    name="UDP Probe" 
    need_root="0" 
    option="-PU%s"/>
          
  <option 
    arguments="" 
    hint="ICMP ping a host or network" 
    name="ICMP ping" 
    need_root="1" 
    option="-PE"/>
          
  <option 
    arguments="" 
    hint="ICMP timestamp request to ping host or network" 
    name="ICMP timestamp" 
    need_root="1" 
    option="-PP"/>
          
  <option 
    arguments="" 
    hint="ICMP netmask request to ping host or network" 
    name="ICMP netmask" 
    need_root="1" 
    option="-PM"/>
          
  <option 
    arguments="" 
    hint="Default Ping" 
    name="Default ping" 
    need_root="0" 
    option="-PB"/>
          
  <option 
    arguments="" 
    hint="Enable IPv6 support" 
    name="IPv6 support" 
    need_root="1" 
    option="-6"/>
          
  <option 
    arg_type="str" 
    arguments="" 
    hint="Exclude given hosts/networks separated by comma" 
    name="Excluded hosts/networks" 
    need_root="0" 
    option="--exclude %s"/>

  <option 
    arg_type="path" arguments="" 
    hint="Exclude hosts/networks inside given file" 
    name="Excluded hosts/networks from file" 
    need_root="0" 
    option="--excludefile &quot;%s&quot;"/>

  <option 
    arg_type="path" 
    arguments="" 
    hint="Read hosts to be scanned from given file" 
    name="Read hosts from file" 
    need_root="0" 
    option="-iL &quot;%s&quot;"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Nmap will generate a given number of random hosts to be scanned. Use '0' to infinite number of random hosts." 
    name="Scan random hosts" 
    need_root="0" 
    option="-iR %s"/>
          
  <option 
    arg_type="str" 
    arguments="" 
    hint="Select ports to be scanned" 
    name="Ports to scan" 
    need_root="0" 
    option="-p%s"/>

  <option 
    arguments="" 
    hint="Only scan ports listed on services file" 
    name="Scan services ports" 
    need_root="0" 
    option="-F"/>
          
  <option 
    arg_type="str" 
    arguments="" 
    hint="Use given decoys to hide identity" 
    name="Use decoys" 
    need_root="1" 
    option="-D %s"/>
         
  <option 
    arg_type="str" 
    arguments="" 
    hint="Set source IP address" 
    name="Set source IP" 
    need_root="1" 
    option="-S %s"/>
          
  <option 
    arg_type="str" 
    arguments="" 
    hint="Use given ports as source for scans" 
    name="Set source port" 
    need_root="0" 
    option="--source_port %s"/>
          
  <option 
    arg_type="str" 
    arguments="" 
    hint="Use given network interface to scan" 
    name="Set network interface" 
    need_root="0" 
    option="-e %s"/>
          
  <option 
    arguments="" 
    hint="Scan for IP protocols" 
    name="IP protocol scan" 
    need_root="1" 
    option="-sO"/>
          
  <option 
    arguments="" 
    hint="Scan for IP protocols" 
    name="List scan" 
    need_root="0" 
    option="-sL"/>
          
  <option 
    arguments="" 
    hint="Ping hosts in a given network to figure out which hosts are up" 
    name="Ping scanning" 
    need_root="0" 
    option="-sP"/>
          
  <option 
    arguments="" 
    hint="Split up TCP headers over several packets." 
    name="Fragment IP Packets" 
    need_root="1" 
    option="-f"/>
          
  <option 
    arg_type="str" 
    arguments="" 
    hint="Set IPv4 time to live (ttl)." 
    name="Set IPv4 ttl" 
    need_root="1" 
    option="--ttl %s"/>
          
  <option 
    arguments="" 
    hint="Avoid random port scan" 
    name="Disable randomizing scanned ports" 
    need_root="0" 
    option="-r"/>
          
  <option 
    arg_type="str" 
    arguments="Fragment size" 
    hint="Specify fragments size" 
    name="Fragment Size" 
    need_root="1" 
    option="--mtu %s"/>
          
  <option 
    arguments="" 
    hint="Scan for udp services" 
    name="UDP Scan" 
    need_root="1" 
    option="-sU"/>
          
  <option 
    arg_type="str" 
    arguments="Number of the protocols to be scaned" 
    hint="Scan for an specific IP Protocol" 
    name="Specific Scan" 
    need_root="1" 
    option="-p%s"/>
          
  <option 
    arguments="" 
    hint="Only try to discover OS if there is at least one open and one closed TCP port" 
    name="Limit OS Detection" 
    need_root="1" 
    option="--osscan_limit"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Time spent before giving up on an IP" 
    name="Time before give up IP" 
    need_root="0" 
    option="--host_timeout %s"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Time spent before retransmitting or timing out" 
    name="Time before retransmitting" 
    need_root="0" 
    option="--max_rtt_timeout %s"/>

  <option 
    arg_type="int" 
    arguments="" 
    hint="Minimum amount of timeout time per probe" 
    name="Min timeout per probe" 
    need_root="0" 
    option="--min_rtt_timeout %s"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Initial amount of timeout time per probe" 
    name="Initial probe timeout" 
    need_root="0" 
    option="--initial_rtt_timeout %s"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Maximum number of parallel hosts" 
    name="Max parallel hosts" 
    need_root="0" 
    option="--max_hostgroup %s"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Minimum number of parallel hosts" 
    name="Min parallel hosts" 
    need_root="0" 
    option="--min_hostgroup %s"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Maximum number of parallel scans" 
    name="Max parallel scans" 
    need_root="0" 
    option="--max_parallelism %s"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Minimum number of parallel scans" 
    name="Min parallel scans" 
    need_root="0" 
    option="--min_parallelism %s"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Maximum time between scan probes" 
    name="Max time between probes" 
    need_root="0" 
    option="--scan_delay %s"/>
          
  <option 
    arg_type="int" 
    arguments="" 
    hint="Minimum time between scan probes" 
    name="Min time between probes" 
    need_root="0" 
    option="--max_scan_delay %s"/>
          
  <option 
    arguments="" 
    hint="" 
    name="None" 
    need_root="0" 
    option=""/>
          
  <option 
    arg_type="str" 
    arguments="" 
    hint="" 
    name="Extra" 
    need_root="0" 
    option="%s"/>
          
  <option 
    arguments="" 
    arg_type="level"
    hint="Raise verbosity level" 
    name="Verbose" 
    need_root="0" 
    option="-v"/>
          
  <option 
    arguments="" 
    arg_type="level"
    hint="Raise debug level" 
    name="Debug" 
    need_root="0" 
    option="-d"/>
          
  <option 
    arguments="" 
    hint="Watch packet while they go through the network" 
    name="Watch packets" 
    need_root="0" 
    option="--packet-trace"/>
    
  <option 
    arguments="Comma-separated list of selected scripts" 
    hint="Selected scripts used during scan" 
    name="Script List" 
    need_root="0" 
    option="--script=%s"/>
  <option 
    arguments="" 
    hint="Skip discovery stage altogether" 
    name="Disable ping" 
    need_root="1" 
    option="-PN"/>
  <option 
    arguments="" 
    hint="Sends probes in parallel and is able to determine what sort of probe will be most effective based on scan results" 
    name="Traceroute" 
    need_root="1" 
    option="--traceroute"/>

</nmap_options>