Hello, everyone.
In this video. We are going to see how can
we perform the malware scripts for nmap?
So to perform this type of scan we are
going to use the syntax, which is nmap the
target IP address.
followed by hyphen hyphen script equals to
http - malware hyphen host
so you can scan any Target by simply giving
IP address and specifying this following
script name and it will start scanning
the targets and will give you the results if the
targets are vulnerable to any malware attack.
Remember you can always add hyphen V
to see the output in verbose mode onto your
screen.
So it is the Practical time and let's see this type
of scan in action see on the terminal.
I have type the command which is nmap hyphen SV
to see the output in.
Verbose mode as well as it is going to show you
the service version detection.
Followed by hyphen hyphen script equals to http -
malware hyphen host which is the script type to
identify that malware exists or not. And we
are going to run this scan onto this target, which is
pro-online.ru.
Also, if you see then we are
going to scan these two ports, which is Port 80 and
Port 443.
So for the ease, I have already performed the scan as
you can see over here and we have got the
output.
Let us observe the output for Port 80
first and you can see the output of
the HTTP malware host seems to
be something like this.
Which says host appears to be clean?
You can see over here for the
output of Port 443. We have identified that
the target is running a Microsoft IIs
server, which is on 7.5
version.
also if you notice
The scan performed on Port 443 again
turned out to be clean, hence. We
conclude that this particular Target is
clean and not infected by any type
of malware.
Similarly, you can run this type of
scan against many Target web servers and
domains or IP addresses to see if they
are infected by any type of malware or they are
a command and control server of attackers.
So I hope you guys understood how to perform this type of
scan. Thank you.