Hello everyone. So in this video we are going to
see service detection of nmap.
So
first to see the standard service detection we
are going to do the syntax. That
is nmap the target IP address and hyphen SV.
So you can scan a Target by simply giving an IP address and
specifying The Hyphen SV flag, which
is used for service for General detection.
So what this will do it will tell you about which services
are running on the ports of
the target. You can always add a hyphen V to see
the verbose output and the example of doing this scan is
nmap the target IP address.
And hyphen SV to see the
output of all the services.
Then it comes the light service detection.
The syntax of doing the light service detection is nmap the
target IP address hyphen SV hyphen version
hyphen intensity and the
intensity you can give is zero.
Remember in this light detection. You
will not be able to see more output
about the services as this
is only the light version of detection,
but in aggressive service
detection.
as you can see on the syntax and map Target IP hyphen
SV hyphen hyphen version hyphen intensity 5
you will be able to see the output of the services in
aggressive mode, which is
more output and more information about the
services which are running on to our
Target.
So, let's see this in the practical.
As we can see on the screen. I'm going to type and map the
target IP address that I want to scan.
and hyphen SV flag
as you can see I have also added hyphen V.
First to show you the output and verbose mode and
by adding hyphen V I can see whatever scan
has been happening and you can see I have found out that there
are total five ports which are open over here,
but we have not identified the service
version of any port. So now this time we
are going to scan.
The ports which are 22 80 1 1
9 8 7 6 9 9 9.
by adding The Hyphen SV flag
So when I add The Hyphen SV flag.
What is the output that I get?
For the ports that I identified that were open.
I was able to also identify that which
service is running on that specific Port as
you can see in the output Port 22 is
running open SSH.
8.0 P1 Debian 6
protocol 2.0 Port 80 is running
Apache httpd 2.4.41, as
you can see Port 9999 is
running FTP and the version is
vs. Ftpd 2.08.
So by this way, we are able to identify that
what services are running on the
ports in case you identify if any
Services outdated you can just search for
the exploit and then you can exploit that
specific service and get into the
server.
I hope you guys understood this. Thank you.