Hello everyone. So in this video we are
going to see the nmap Boolean expression scam.
So what is Boolean expression scan? So here
we are going to see that how we can choose us
script category or choose multiple
script categories or exclude any
type of script category from our scan.
So the syntax of doing this particular scan is nmap the
target IP followed by hyphen hyphen script
equals to and or not types
of Boolean expressions and the script
type which is the script name.
So you can scan your target using this way
also.
You can always add hyphen V to see the output in verbose
mode and the example is given over here. So let's
see this how we can perform this in
practical.
Let us see what does the nmap NEC usage
says about using Boolean Expressions.
So as you can see over here.
And map hyphen hyphen script not intrusive which we
have already seen will load every script except
for those in the intrusive category. Perfect.
What does
Nmap, -script default or save means this
means it will this is functionally equivalent
to this default comma safe and
it will load all the scripts that are in the default category
or the safe category or the both similarly
default and save means all the
scripts from both the categories.
And this is interesting which is default or
safe or intrusive and not HTTP
-star. What does this means
load all the scripts in the default safe or intrusive
categories? We understood this.
except for those whose name start with HTTP hyphen,
perfect
So, let's see the similar kind of scan over here wherein
I have typed and map -script.
Default or broadcast which means
scanned from these categories and not
SSH - star exclude
the scripts which starts with SSH.
for this particular Target IP address
as you can see
the scan has been started, but I have already performed the
scan.
As you can see over here.
All the script types are being running.
As you can see but it is excluding the
script type which is SSH as you
can see over here. This is the output for Port 80.
HTTP LS which is directory listing which
is enabled and you can see these files have been
listed.
Next is the title. The title is index of
Slash of that particular web server.
You can see in the output nowhere. You can
see any output which is related to SSH.
Or any output related to SSH script
type in default or broadcast.
So I hope you guys understood how you can use the Boolean
expression scan in nmap.
Thank you.