And map, script, engine or NSC.
So what do you suppose script scanning would be?
So an map is indeed a software for port scanning purposes, right?
It can also be used for pen test purposes using its advanced features.
And MAP has started to be developed as a board scanning tool, and today it has exceeded itself with
its vulnerability and exploitation features.
So the unmap scripting engine, or NSC, is one of end maps, more powerful and flexible features.
So it allows users to write and share simple scripts to automate a wide range of network scanning tasks.
These scripts are then executed in parallel with the speed and efficiency that we would expect from
any map so users can use scripts distributed within MAP or write themselves to meet their specific needs.
NSC consist of scripts in these following categories.
Defined categories of broadcast, brute default, discovery, dos exploit, external foser, intrusive
malware, safe version and von.
So the category names are not case sensitive and, well, let me just briefly describe each category
off so these scripts handle authentication information or bypasses it on the target system.
Instead of scripts that use brute force attacks to identify credentials, they are placed in this category.
Broadcast.
Scripts in this category typically discover hosts that are not listed on the command line by publishing
to the local network.
Use the new target script variable to allow these scripts to automatically add hosts that they discovered
to the end map scan.
Q.
So these scripts use brute force attacks to estimate the authentication information of a remote server
and map, http, brute, oracle, brute, S&P, brute, etc., including many scripts that enforce the
protocol.
Discovery.
These scripts attempt to discover more about the network by querying Global Records as an MP enabled
devices, directory services and so on and so forth.
So, Dossey.
Scripts in this category can cause denial of service.
Sometimes it is done to test the vulnerability for denial of service method, but more generally it
is undesirable because of the side effect required to test the conventional vulnerability.
In other words, these tests sometimes crash sensitive services.
Exploit these scripts are intended to actively exploit a vulnerability.
External.
Scripts in this category can send data to a third party database or another network resource, for example,
who is IP establishes a connection to the who is servers to obtain information about the destination's
address.
The operators of the third party database probably record everything that comes into them, so this
will log your IP address and the destination address.
Most scripts that do not fall into this category contain absolute traffic between the scanning computer
and the client.
Foser.
Scripts in this category are designed to send unexpected or random fields by the server software and
each package.
Although the technique is useful for finding undiscovered errors and vulnerabilities in software, it
runs both slowly and uses a lot of bandwidth.
An example of a script in this category is DNS Fuzz, which slightly bombs a DNS server with incorrect
domain requests until the server crashes or a user defined time limit expires.
Intrusive.
These grip's.
Cannot be classified into a secure category because the risks may be high enough to destroy the target
system.
We can fully exploit the resources that means bandwidth, CPU ram of the target system.
Therefore, they are perceived as unwanted processes by system administrators, as you may very well
imagine.
Malware.
These scripts test whether the target platform is affected by malware or back doors, for example,
SMTP, Strange Port, which monitors SMTP servers running on unusual port numbers and off spoof, which
identifies similar fraud numbers.
They give a fake answer before receiving a query.
Both of these behaviors are usually caused by malware infection.
Safe scripts that are not designed to crash services use large amounts of bandwidth or other resources
or exploit vulnerabilities.
They're less likely to harm remote administrators, but we cannot guarantee that they will never cause
adverse reactions, as with other inmate features.
So most of them are performing general network discovery.
Scripts in this category are not classified for security, but all other unsafe scripts should be placed
as intrusive.
Version, so scripts in this particular category are an extension of the version detection feature and
cannot be explicitly selected.
They're selected run only one version detection as vete is requested.
Outputs are indistinguishable from version detection output and do not generate service or host script
result.
Von, these scripts check for specific known vulnerabilities and typically report results only if they
are found.
Default.
So this is used with a C or the A parameter scripts defined in the default category are speed, usefulness,
verbosity, reliability, intrusiveness, privacy.
Script equals can be used with a default parameter,
so enmasse script files in the script folder.
If you don't know the full name, you can list all the scripts when you run, locate NSC on the command
line if you're looking for a specific script for a specific topic.
Then just type it into the command line.
If you want to, you can always edit the scripts, you can review them, make changes, for example,
if we are looking for DNS related scripts.
We just need to type in the command line.
Current NSC scripts are available at unmap dot org.
You can view all scripts and usage patterns and.
This address in that dog and IDOC.
So unmap.
Since NASA is open source, it's constantly updated, therefore it is necessary to update the script
database before scanning the scripts.
Yeah.
So to do this, you just run the command script update.
Now, there are a few parameters to scan the script within Matt.
And I'll show you a few of them.
And AC.
If we only use the SC parameter and map scans for IP and port with scripts defined in the default category.
And map, script, script, name, target.
So in this case and map will scan with the specified script.
So if you want to get help with a script, we can use and map, script, help, script name.
And maps, graphs can be used with other parameters as well.
So the script that we use here must be compatible with the service that we scan.
Might not seem obvious, but.
So let's write a few examples of and commands.