Hello, everyone.
In this video we are going to see the nmap script
attack categories.
So nmap has couple of
categories of the script types. We are
going to see those categories one by one.
So the first category that we are going to see is the
safe Scripts.
What are these safe Scripts?
So nmap has made the categorization based
on the types of script that we
use to perform a scan
on a Target.
Those scripts which fall under safe script types
are generally considered to be safe and
not intrusive.
So the syntax of doing this scan is nmap the
target IP hyphen hyphen script equals to
safe.
Or you can write comma default.
remember safe and default are
The same have the same meaning.
So you can scan a Target by simply giving IP address
specify the safe hyphen.
Hyphen, hyphen script equals to save comma default flag
which is used for scanning the targets when default and save
script types.
You can always add hyphen V to see the output in verbose
mode.
The example of doing this scan is nmap Target
IP -script equals to Safe comma
default as you can see over here.
So it is a practical time now and let's see. How can
we see the safe type of category of
nmap in action?
See on my screen. I have opened the nmap categories
section wherein you
can see the categories are listed over here.
So there are different categories like auth broadcast brute default
Discovery dos exploit
external further intrusive
malware safe version and
one reliability.
Nmap, has a very good collections of scripts that
can be used for each type of attack type.
Let's see the default one when you can
see these are the default script types, which are generally used
to gather information about a Target.
The information can be the server information
address information summary type
of information who is scan and other
type of stuff, which is generally not
intrusive.
Let me go to the save type.
And you can see it contains the safe scripts
which are used to discover content about
the Target or to do some type of banner
grabbing.
If I go one step back, this is the directory listing where
you can see all the categories.
And you can read about each category by clicking on that
category link.
Perfect.
So now let's see the Practical example by running
this default and save type of scan.
So as you can see on the terminal I have typed and map -script
default comma safe.
Hyphen, PN, which is for no ping the
do not do host Discovery and then the
target IP that I want to scan.
I will hit enter and you can see the scan
has started successfully.
I will just hit enter to see the progress of the
scan.
It is almost.
done
I will just skip this.
Okay, so as you can see, we have got
the output over here and you can see in the output the
first script that run was broadcast
DHCP discover broadcast DNS
service discovery.
broadcast listener the sender IP the sender Mac
the target IP address
Again more information. You can see Target ASN information
and the scan is still running.
Let me skip this to the results.
You can see here. We have got the results of reverse
index.
SMB enum services
clocks Q
So basically, these are the types of
categories which fall under safe and
default and we have got the results for
those types of category scans.
Let me just change the target.
And let's see if we get anything.
interesting on this particular Target
Let me specify the port number this time. Let's say
I just want to scan for two ports, which is Port 80 and
Port 22.
Let me skip this scan.
And jump to the results.
as you can see
ASN query DNS Blacklist host map
ipgo location who is
domain
all these types of scripts have been run and this is the output of
the script.
So I hope you guys understood that how we can perform
the nmap safe and default script
scan. Thank you.