Hello everyone. So in
this video we are going to see the nmap
script type vulnerability.
So this particular category of script will
contain all the scripts that
are used for vulnerability scanning
of web applications or either network
devices.
So the syntax of doing this can is nmap the
target IP address followed by hyphen hyphen
script equals to view Allen that
is well in
you can scan a Target by simply giving IP address
and specifying this particular flag of vulnerability which
is used for scanning the target with all
the vulnerability script types.
You can always add hyphen V to see the output in
verbose mode and the example is given over
here. So it's the Practical time
and let's see how you can do
this.
particular scan in real time
as you can see on my screen. I have given
the command which is nmap -script.
Villain which stands for one liability and I
am scanning the target which is scanme Dot
nmap.org.
As you can see I have already run this scan to
save the time and this is the output of this can.
In the output if you notice.
The first script is broadcast a v
a h i avahi dos and you can see that some
host. It has
found out to be vulnerable to see we 2
point.
Cve 2011-1002.
Let us see for next you can
see here.
clam AV execution
we can see here HTTP Dom based xss.
You can see your csrf found csrf vulnerability.
HTTP enum, which says there is direct realistic
enabled on this particular direct tree, which
is images and shared.
next you can see HTTP slowest check
which is checking for slow risk
based dos attack and you can see it
has found out that this particular Target is likely
vulnerable to slow risk loss attack,
which has the cveid as 2007
6 7 5
0
If you move forward you can see it also tried
for HTTP stored access and clam
AV execution.
So this was the vulnerability scan.
And the vulnerability scan we identified that
our Target is vulnerable to these types of
vulnerabilities with their cve code. So
it becomes very very easy for us. We can
directly jump on to the cve database
and read about that one liability.
in case there are
Exploits which are published either on GitHub or
meta flight framework, then you can directly exploit
your target from there also.
So I hope you guys understood this particular section of the video. Thank you.