Hello everyone. So in
this video we are going to see how you can scan
using specific scripts in nmap.
So the syntax of running this particular scan is nmap the
target IP address followed by hyphen hyphen
script equals to the script name.
Remember it is not necessary to add dot NSE
at the end of the script. Although you
can also run the script with adding it or without
adding it.
NSE stands for nmap scripting engine
so you can scan a Target by simply giving
an IP address and specifying the script name and
enmap will run the script and will give you
the output onto your terminal.
You can always add hyphen V to see the output
inverse mode the example of doing this can be
and map the target IP address followed by
hyphen SV.
-script equals to the script name that you
want to use for scanning.
So it is the Practical time and let's see this scan
in action.
As you can see on my screen. I have already identified by
running this particular scan. That is
nmap the target IP hyphen SV.
- P 9 9 9 to identify what is
running on this specific port and I have identified that
FTP is running onto this
particular port.
Now I'm going to attack the FTB using
the script, which is FTP brute
as you can see over here.
So I'm going to hit enter.
and
this particular FTP brute script
is going to start.
And it will find a valid credentials for
logging into the FTP the scan
is going to take couple of time. So I'm just going to skip this.
And I will bring you to the results as you
can see. These are the results of the script which has
run as you can see FTP brute output and
nmap was able to identify two
valid credentials first is admin
admin and second is sysadmin. I
love you though and map is able to successfully find
out two valid credentials, which are
these two valid credentials. Let's verify
are these credentials right or
wrong?
So what we are going to do is
we are going to quickly go on to the Target server.
We're going to log into the target server and here. Let's
verify are those credentials, right?
Let me open up Etc past WD and we can see
here Yep. This is right. This admin
is a user for which we have find out a
password. Let's see is admin a user. Yes. Admin is
also a user which means the usernames that
we have identified are correct.
So I hope you guys understood this. Thank you.