Hello everyone in this video. We
are going to see nmap discovering directory scan.
Through this scan you can discover sensitive directories
on the target which may give
you some juicy information.
so the syntax of doing this scan is nmap the target
IP address followed by hyphen hyphen script
equals to http - enum
you can always add hyphen V to see the output in verbose
mode.
The example of doing this scan is given below like
this.
Let's see the Practical of the scan and
let's identify how we can get the sensitive information
of directories by running
this particular scan.
Can see I have written the command.
This is I'm going to type it in my terminal. I've already
performed the scan and here is the output
when you can see first. I perform this
particular scan on my internal.
Server wherein I was able to identify a
potentially interesting folder, which
is server status.
this server status folder
gives the status of the folder which may
be containing sensitive information
about the target. So if
you get this particular folder or directory onto
a live website, then it will be
of more severity and may also
go to a critical level bug.
Because it may expose some of the sensitive details.
I've also run this scan
on the nmap website as
you can see over here.
scanme Dot nmap.org and I have
also found some of the
potentially interesting directories like Images slash shared
So, this is how we perform this particular scan, and this is how you
can get sensitive information by finding potentially
interesting directories. I
hope you guys understood. Thank you.