Welcome to The End, Matt, scripting
engine vulnerability scanning and
exploitation lesson in previous
lessons, we've covered various
aspects of mapped scripting engine.
I've shown you how to perform a
couple script scans and get
help information about scripts from
both the command line and in zone
map.
This lesson will go over some of
that stuff, but we'll focus on the
use of NSC for vulnerability
scanning and target exploitation.
The truth is NSA could be an entire
training series on its own.
So this lesson will focus on giving
you the tools to get started.
Here are the learning objectives for
this lesson.
First, we'll briefly answer the
questions.
What is the unmap scripting engine
and how does it work?
We'll examine how and map scripting
engine gives us the ability to
perform advanced scanning.
Then we'll go through a lab that
demonstrates its use as a
vulnerability scanner and
exploitation tool.
So what is the unmap scripting
engine?
Well, up until this point, many
of the features and functions that
we've learned about in MAP basically
require you to execute one command
at a time, then gather the results,
which generally leads to more and
more single commands for further
investigation.
One of the neat things that NIST
allows us to do is write out a
series of commands in the form of a
script that can be dependent and
related to one another in such a way
that our time can be much more
better focused on analyzing the
results instead of on
typing in a command at a time and
weighting.
The way you do this is by using and
maps built in scripting engine,
which uses the LUA programing
language.
The creators of that map like to say
that Nessy provides the ability
to automate networking tasks.
Lua works very nicely for Unmap
because it is an interpreted
language and not compiled.
That basically means that you can
use any text editor to create your
scripts, then run them from
the unmap command line or within
Zenab.
Lua is extremely lightweight and
has been around and refined since
the early 1990s.
Learning it is very easy and I think
you'll find that it is well worth
your time is fully documented
on their website and best of all,
it's free and built into and map.
Each and every script contains a
field that associates it with one or
more categories.
Those categories are auth for
authorization, broadcast
default, discovery.
Most of what and map is known for
dogs. Nihil service
exploit external
foser intrusive
which are potentially hostile
malware for remote
malware detection.
Safe, which has little risk
version for version detection
signatures and vom
for vulnerability detection.
What is really great is that there
are hundreds of NMC scripts
that ship meaning download and
install within MOUT.
We'll go over how to find them, how
to open and examine them and how to
run them in different ways,
they're all very well documented and
map dog whack Nasdaq.
Also, I should note that the code
base of scripts unmap site is
constantly being added to
finally, you really need to be
careful with NSC scripts.
They have the potential to do
harmful things to your computer,
computers on your network and target
hosts.
Make sure you only run scripts that
you downloaded from the map Web site
wrote yourself or got from someone
you really trust.
As with any unmap scan, understand
the effects of the scan on both
your computer and the target.
So how does the end map scripting
engine work while this is sort
of a trick question because there
are several regular command line
switches that cause scripts to run
by default.
For example, I've shown you the and
map dash capital ASCAN in the past,
which I call the advanced and
aggressive scan.
That scan actually runs every NSC
script that has been labeled in the
category default, among other
things.
But for the sake of clarity, there
are two command line switches that
can be used to specifically initiate
the end map script scripting engine
they are and map dash
s capital C and
map dash dash script
like and map dash capital A
and map dash s.
Capital C also runs and
map scan using all of the scripts
that have been labeled in the
default category on the other hand.
And Map, dash dash script allows
you to specify the exact script you
wish to run or even an
entire category of scripts.
There's some other flexibility with
the dash dash script command line
switch to for example,
you can run every script that starts
with a specific name, two
or more scripts at the same time,
or even use Boolean arguments
to tell and map to run scripts that
match certain criteria.
I'll show you the stuff in the lab.
The main point I'm trying to make
here is that for the most part, if
you want to run and map and see
scripts, you'll be using the dash
dash script, command line switch.
The last bullet point is a link to
the online man page for Nessy.
There are a couple other features
and options that I won't be covering
in this lesson, so I recommend that
you navigate to this page
to see some of the other options
available to you as you run and
see scripts.
OK, so enough talk, let's do
a lab in this lab,
I'm going to demonstrate some of
these capabilities.
My main goal is to give you enough
information about NSC that you feel
comfortable trying it out for
yourself.
Also, I want you to see how good
and maps built in scripts are at
detecting vulnerabilities and
exploiting them.
I truly believe that NSA's
capabilities are only limited by
user support and desire to
contribute to this amazing tool and
community.
We're going to find a Cisco switch
on my network, see if it has some
vulnerabilities, then exploit them
and see what happens.
Before we do that, though, I'll show
you where to find Nze scripts and
remind you how to get help
information about them.
And I'll show you how to run several
or many of them at the same time.