Nmap can be executed without specifying any targets, but the form does not permit it.

[RomuDeuxfois]

Description

With NMAP I can choose to have a manual target

But, if I don't fill any targets the inject status still in missing content.

[RomuDeuxfois]

@Seb-MIGUEL if we add possibility to create endpoint manually, should we change this screen ?
I think, targeting hostnames & IPs direclty is a workaround and it should be better to only target endpoint created on the platform.

[Seb-MIGUEL]

@RomuDeuxfois I think in this specific inject the "target assests" misled because the real target is IP or Hostname. I think when we'll have the manually asset import we should target an asset (and then the asset will be the target of the nmap scan).

I think we need more discuss because it could make sense to let the option to specify IP, CIDR range or FQDN to some use case where you can't add the asset manually before. An exemple: You want to check there is no shadow IT into a subnet then you got 2 options: add manually the CIDR range into the assets or juste let specify the CIDR as an argument.

[RomuDeuxfois]

I see, so we need to let the possibility to fill outside informations in this inject.

[RomuDeuxfois]

Sorry, I forgot that we had already created a bug for this, and it was already assigned.
I made a PR here -> #3336 with @guillaumejparis