- Scan with the default: --script=default (same as -sC)
- Scan with a script (you can use commas to separate multiple scripts): --script=[script name] (for example, --script=http-enum)
- Specify arguments for the scripts: For example, --script-args creds.snmp=admin