Hello, everyone.
So in this video we are going to see one of
the most interesting script of
nmap, which is firewalk.
So when we are running a firewalk scan onto
a Target we can identify that.
Is the firewall blocking some
of the ports or not. So
basically you will not be able
to get the correct output or
the response when you hit request on
some of the ports.
The reason may be because the firewall is basically blocking.
You to identify the status of those types
of ports?
You can identify those ports onto
a server where the firewall
is configured to block.
So, let's see how we can identify if any
web server is blocking any particular Port
using this scan.
The syntax of doing this scan is nmap the target
IP address followed by hyphen hyphen
script equals to firewalk and we can also see
the trace route wherein you
will understand how your request is going to that particular Target.
You can always add hyphen V to see the output in
verbose mode the example to run. This
scan is given below.
Let's jump to the Practical and let's
see how you can run this.
As you can see on the screen here. I have given
the command which is nmap -script equals
to firewalk and I'll
also I'm giving trace route to see the Hops.
And I will give the target which is scan Dot
nmap.org.
As you can see this particular scan requires
root privileges, so I will
just quickly become root and I will again run
this scan.
As you can see the scan has successfully started.
I will just skip the scan so we can directly
jump to the output.
As you can see we have got the output and let's understand
the output.
As you can see over here the particular host.
Has some of the ports which are blocked as
you can see, these are the ports which
are blocked by the firewall, which
you if you scan will not be able to identify
the correct status.
So we are able to identify this ports
are blocked because of firewalk script
as you can see we have got four ports
which are block ports by
the firewall.
Now you can see this is the output of the trace route.
Wherein we are able to identify each request that has
been hopped.
in the trace route output
So I hope you guys understood.
This particular scan, which is firewalk scan.
Thank you.