Welcome back to another video from section 5. A script engine
part. 3 with a packings to
do. The second video from section 53. In
this video. We're going to talk about
and have an overview. Your HTTP scripts as
you know, deserve Rarity of this criticism and mapped engine.
So if you scan, take a look at
some of
Them and explain about them. There's nothing the
last videos and previous videos. You can find all
the sleepy and scraped name a scripts, but
let's go and have some really on
them.
So, where's our commands? Let's go to our k x. The
here. We are at a callanetics. The first script is
nmap dash of script and
HTTP backup finder. Or did you
exactly here the crimp Von? It is partner website and
attempt to identify the backup copy of discover files. It
does. So by requesting a number of the different combination of
the filename, example, index, dot back
or index.html.
Our second comment. We have nmap Dash p instead of
put a forward and a specific port for Target and
Dasha scraped Mongo database
and Hast. So please
subscribe button to get a list of the tables from mongodb database. The
third one is m f Dash script HTTP,
config backup. So obviously true for a back up.
System files of common content management system and
web server configuration files.
Thanks when he is.
And mad dash of script HTTP, proxy, brick
HP, and stand for the bird and
a Target. So what is it? Exactly? Perform
Brute Force. Password, guessing against HTTP, proxy
servers?
The next one is.
We talked about it in previous videos. So this
is my B overview for you, but the scripts this
is script used on PWD. Be
and brutal, libraries to perform password guessing,
and it's actual guesses are stirred. In nmap registry
using the creds library
for other script ears. So
let's talk about again and map that
rescript HTTP Dash Boot and Stanford opportunity.
The next player and a next comment is nmap
measure script and HTTP, RFI spider, and
Stanford birth.
Crosby. Observers in a search of RFI that
remove file inclusion vulnerabilities as
easy one of the OS, top 10 fewer,
interesting. Loaded it test, every from
presidents find and every permits
of the URL containing a query.
The next one is this first axis with
the default credentials Verity of application as
devices. So what are the common dandruff, Dash p,
84 report and dishes script issue,
beautiful accounts and house or IP. So
it works similar to the airstrip in operation that we talked about in previous videos,
which is a replication by matching noun past
and launching a login routine, using
a default credential when found, this
is crib depends on a fingerprint files contained it.
Informations for example, names categories, location path,
and default, condition and login routine. And
the last comment is upload a local file to
remove the web server using vegetable crude method. You
must specify the file name and URL path with
NSC arguments. So we take
additional closely this one and map Dash p + 4 and
IP and a certain script HTTP period. And
that is your script and we're exceeding the argument and
HTTP Dash boot. Don't Yura.
Well, and we uploading the route me that
PHP initiative product file, an
attempt ruined me dot PHP.
But far from here, we will talk about lot
about Emma by scripting ring and all the scripts.
So we have an overview to make sure you remember all
of them.
I'm not sure who the actual I'm interesting. We're going to
writing an essay screwed on, have introduction to how to
write an assisted by yourself for yourself and customize it
as my you wish. Good luck.