The most powerful feature of nmap is its script engine. This allow you to use it in a semi-automatic mode, performing complex task, such as vulnerability detection, backdoor detection and even vulnerability exploitation.
You can find a list of NSE scripts here, and write your own in LUA.
Currently my two favorite are :