‫In the end, Mapp lectures, we have seen no port scan, also known as being scan different ways of
‫scanning ports since scan, also known as half open scanning TCP scan, also known as TCP, can scan
‫UDP scan service and version detection and operating system detection.
‫Now, let's deep dive in and map the map scripting engine, or Nessie is one of 10 maps most powerful
‫and flexible features.
‫It allows users to write simple scripts to automate a wide variety of networking tasks.
‫Now those scripts are then executed in parallel with the speed and efficiency you would expect from
‫a map.
‫Users can rely on the growing and diverse set of scripts distributed within map or write their own to
‫meet custom needs.
‫So I'll show you a couple of things here.
‫Scripts are written in the embedded Lua programming language version 5.3.
‫And as he is activated with the surrogacy option or script, if you wish to specify a custom set of
‫scripts and results are integrated into and map normal and XML output, the default place of end map
‫embedded scripts is slash user slash share slash and map slash script.
‫NSC was designed to be versatile with the following tasks in mind.
‫Network discovery.
‫Now this is the most powerful part of in map, right?
‫Examples include looking up who is data based on the target domain querying ripe for the target IP to
‫determine ownership, S&P queries and listing available SMB shares and services.
‫More sophisticated version detection.
‫The map version detection system is able to recognize thousands of different services through its probe
‫and regular expression, signature based matching system, but it cannot recognize everything.
‫For example, identifying the Skype version to service requires two independent probes.
‫Which version detection isn't flexible enough to handle and map could also recognize more as an MP services
‫if it's right, a few hundred different community names by brute force.
‫But neither of these tasks are well-suited to traditional and map version detection.
‫But both are easily accomplished with nrsi.
‫Vulnerability detection.
‫When a new vulnerability is discovered, you will often want to scan your networks, quickly identify
‫vulnerable systems before the bad guys do.
‫While in Map isn't a comprehensive vulnerability scanner, NFC is powerful enough to handle even demanding
‫vulnerability checks.
‫Remember when the Heartbleed bug affected hundreds of thousands of systems worldwide and maps developers
‫responded with the SSL Heartbleed detection script within I was under two days.
‫Back door detection.
‫Many attackers and some automated worms weave back doors to enable later entry.
‫Some of these can be detected by Maps, regular expression based version detection, but more complex
‫worms and backdoors require NZ's advanced capabilities to reliably detect them.
‫Vulnerability exploitation.
‫As a general scripting language, NSC can even be used to exploit vulnerabilities rather than just find
‫them, but of course, it's not as powerful as exploit frameworks such as Metasploit.