Hello everyone. Welcome to this video. In this video. I'm
going to be showing you how to perform vulnerability scanning with
nmap, using the nmap vulner script that
comes prepackaged with nmap. Now, I'm currently
on the GitHub repository, just to give you more information regarding
the tool and how it actually does what it
does. So as I said, this is going to be focused on
vulnerability scanning. So if we take a look at the description of
the nmap vulner script here, you can see
it tells you that this script is used it.
Is the default nmap service version detection system to
get banners and then it uses those banners to perform. Scans
will actually scan to see if
any of those services are vulnerable to a particular exploit
and exploit that has been publicly disclosed
and then it does that and displays the various
cve codes for these vulnerabilities. So again,
if a service is vulnerable to a particular exploit,
it will list out the cve. Code CV, e
stands for common vulnerabilities and exposures.
And again, it will list out the actual code
here and then it will also display the severity in
the event that again you want to know how to
structure your tax and then it gives you a relevant link
that gives you information regarding when the vulnerability
was disclosed. So on and so forth. Now,
as I said, this script comes prepackaged with all latest versions
of nmap and using it is very simple. We need
to run the default service. Version detection, scan and
then run the script vulner here and then
The target. So we'll do that right now. So again, running it, as
I said, is very simple. All we need to do is type in nmap. And
then we say service version detection. We want to perform some
service version detection and we can also run a stalled scan
here in conjunction with this and that we
can then specify the port's that we want. In this case. I'm just
going to specify will say ports 21
to port 8080 or
we can simply just run. The default port scan,
which is 1000 of the most commonly used parts.
And then we say script and then we specify the vanes option
right over here. So that's the name of the script. We save
owners and then we hit 10.10 10.0.0.0
switch. Is the actual IP
address of the Metasploit aboard three virtual machine and
we hit enter. It's going to ask me for root privileges. I'm
going to provide it with root, privileges, avoid my
password, and there we are. So I'm just going to let
this scan complete and I'll get back to you when it's done.
Alright, the scan is complete and as you can see,
C4 Port 22, which is running SSH and openssh 7.1.,
We have various cves that
are listed here. And we also have their severity. So
you can see of this is open, estate 7.1, and
it gives us all the actual cve
codes that we can actually then copy and use for
our own research. So again, I can open that up in Google So
based on go and that will take me again to
the actual releases. So you can see if I open up
a rapid 7 here.
Rapid7 will give us more information regarding this
vulnerability and how to exploit it. So you can see
it tells us this is an openness Sage vulnerability. And
again, it gives you a description of the vulnerability and then if there is
a Metasploit module, it will actually list out the Metasploit module
that you can use to actually exploit this particular
service. So again, it's extremely useful in understanding what
actual services that are running on
the target. I are vulnerable to publicly known exploits
and again the idea
Vision of having the CVV code is extremely helpful and
you can see pretty much the only service that
we actually getting the vulner script
successfully running or giving a script is the
SSH port. And of course, that does not mean
that the other services running on the system are not
vulnerable to any particular exploit or are not vulnerable to
any particularly are not vulnerable to any openly
known exploit. It simply just means that the
Foreigner script was not able to come to that.
Particular conclusion, using the banners. It was able to retrieve. That
being said, that's pretty much all that. I wanted to cover
in this video. And I'll be seeing you in the next
video.