Hello everyone. So in
this video we are going to see how you can perform
the nmap exploit script type.
So in this particular script type, there are
those scripts which are used to check
if the server is vulnerable to this
type of exploit.
Those exploit include web application based
attacks like csrf xss. And
so on that we are going to see in our practical.
So the syntax of doing this particular script scan
is nmap. Target IP followed by
hyphen hyphen script equals to exploit.
You can scan a Target by simply giving an IP
address and specify the exploit flag.
In which nmap is going to run all the exploit
script Types on the given Target.
You can add hyphen V to see the output in
verbose mode and the example of doing this scan is
given over here.
So it is the Practical time and let's see how you
can perform this particular scan.
As you can see on the screen, I have given the command
which is nmap test php.1 web.com.
This is our Target on which we
are going to run this exploit scan hyphen hyphen
script the script name.
That is exploit category and we are going to scan two
ports. That is 80 and 443.
As you can see the scan has successfully initiated.
Let me skip this scan and let's go to
the results.
As you can see the scan is completed successfully and
we have got the results. So let's understand the
results.
On Port 80 and map has found
it is open and it has tried for clam AV
execution, but it was a error.
next as http csrf
so and map try to see if it
is vulnerable to csrf attack and enmap has
successfully found out that the following are
the particular Pages where csrf
vulnerability exist.
Yes, you can see there are so many
pages which are vulnerable to csrf attack.
Remember this particular
domain which we are testing that is test php.1 web.com
is a testing website and a vulnerable
website.
Let's see that it output result for HTTP Dom
based access and you can see couldn't find
any Dom based access. Next is HTTP Lite
speed source code download
as you can see the application is
vulnerable to this particular attack. Next is
stored excesses and one more one
cve vulnerability which and map right for
so I hope you guys understood how you can attack any Target
by running the exploit scan
category. Thank you.