Hello, everyone.
In this video we are going to see sitemap generation.
How you can generate a sitemap of any website
and also how you
can perform directory listing.
For sensitive directories to identify some
of the juicy information of the
target web server.
The syntax of doing this scan is nmap Target
IP address followed by -script
equals to http -
sitemap hyphen generator, which is
the NEC script.
You can always add hyphen V to see the output in
verbose mode on your terminal the
example of doing this cap scan is
given over here.
So it is the Practical time and let's see how you
can run this particular scan.
E on the terminal I have given the command which
is nmap.
-script the script name the target,
which is scanme Dot nmap.org and
Port 80.
I will just hit enter and you
can see the scan has successfully initiated.
We have also got the output and you can see the HTTP
sitemap generator has generated
the directory structure of that particular
website wherein we are able to see
the directories which are images.
Share hyphen CSS shared Hyphen, Images
shared Hyphen, Images hyphen accomatics and
the longest directory structure which you
can see over here is this which nmap has
successfully identified.
So this is how nmap performs the
sitemap generation and is able.
To also see the directory listing and
it gives to you.
You just need to go to that particular directory listing and
try to see if there is
no authentication then simply.
See if any juicy information is hosted on
there, which will be useful for us.
So I hope you guys understood this. Thank you.