Well, hello everyone and welcome back to
another with you. With this course, we're
in section tree and map is scripting engine
part 1, basic Scripts.
This is the first video of this section introducing
the nmap scripting engine to you.
Well first, let's see. What is going to see what is it doing? And what
services is provided to us as an nmap services.
According to the end map in the description in June or Ennis. He's
one of the most in my power for folks who
features is allows user to write and share the simple
scripts to automate a wide variety of networking tasks,
or security tasks such as Discovery
such as when Liberty analyzing and exporting
them.
This is Crypts are executed in parallel with speed and offensively, you
can expect from rain map. Users can
rely on the growing and diverse set of the script Distributing
with nmap or writer own to
meet your custom needs.
Reflect use differences uses and simplify the
chooses which script to run is
a script continued field. Associating it with one of the
more categories. I'm gonna explain it
in the next comment for your better understanding.
Well, and as you can see in the first comment
and map dash dash a script. As
I said, there's a different categories that you can use for your scan
such as authentication or aut
Edge or broadcast. Default Discovery does
exploit father Malvern and
safe.
I'm going to explain some of them to
make sure you understand all of them. For example, authentication.
Try to authenticate credential or
by passing them on a Target system or broadcast is
a script that's typically do discovery of
Hast not listed on the common line by broadcasting on
a local network or brute. That
as you know, it's just a bird's first.
Attack to guess at education credential of a remote server
and my content script for brute forcing dozens
of the protocols, including HTTP, recruits Raquel,
brute and SNP, brutes and
Etc. Also, there is an important category
that may want to start using
that for your first. Try as
a beginner is default. This
is screwed. Our default set and run when using the
dash s
Capital c, as you can see, needs second comment or Dash
capital a option read and enlisting. Screened, double
mesh screen is category. Can also be
specific like you're any other using data
script by default. So
many factors are considered in deciding whatever is captured
by Ranma defaults. So let's
go to the terminal and start working on it.
Okay, first of all, let's find all
the NSE and all the script. Do we have on
our Cal Linux by default in, in map database? So
we can take a look at it, Bros it. If you want around
trying to make find out which
One of them is the best for you to perform a
task. You can find all the NSC scrapes
by typing locate that is Linux
comment and a star does
stand for every file. Your system. Dot
m, SE Delta C
is the all the nmap a
script engines format that you can find
it this way. Fridges of file such
as default dot Enis. He is
In my be scraping engine script. So, by
typing on it.
I need until you can find all of the scripts in
your system.
That are available in nmap directory
or you can just simply go
to the admin directory.
and find all the
scripts in it. So we
change the value to the user.
Share and map and
Scripts.
I'm doing it Ellis so we
can see all the
script that we have here. So as you can see,
there's a rarity of the scripts that you can use lots
of tasks and perform a mini many information-gathering
attacks or exploding or finding
a liability.
Let me clear the screen and let's get back to our script.
So let's test our first comment with
a category, default in
Lockland. And here's a Target. We're going to hit the intern and
waiting for the results.
So as you can see, here's the results by 10 map.
Also, we have a good result, a good output
from any map.
Let's get to the are sick and comment. That was.
A map dash s
Capital C and gosh.
And we are going to wait for the result.
Again, you can see the result here, as I mentioned in
the slides.
For another example, you can use any this
crib, you one from release that you have in your script directory.
For example, this one is HTTP header
trying to find all the servers and I accepted ranges
and the connection types and trying to find your open
borders on a website and you target
Let's get back to our PowerPoint. Well,
at the beginning, we have a quick brief unana
C, then we told you how to find
an app and make a script and how to use it. And
then we test in your lap.
In the next video you can find em ups, transcripts. Good
luck.