Hello, everyone.
So in this video we are going to see how
you can set up your own scanning profile
in zenmap.
So we will just quickly start zenmap.
After that, we are going to go and click on.
Profile and we are going to click on new profile.
Once you have clicked on new profile, we are going to make a
new profile for our custom scanning.
Let us quickly give a name to our profile.
So let us say we gave the name as row hits
Recon profile.
So after I have given this name, you can also give a
description. So let's say description is
of profile to run on.
Target
quickly
for performing the Recon let's say
Okay, so when you come into the scan option.
Obviously we are not going to specify that targets. So
I will just leave this blank.
We are going to run.
the
options from here as you can see
I'm going to select the version detection and I'm
going to disable the reverse DNS resolution.
I will go in ping. If you want to disable pink,
then you can do that. So I'm going to
disable ping.
We can choose any other options if you want in the scripting. I'm
going to choose some of the script that
we can run onto the particular Target when
we are doing this enumeration. So
let's say we select one of
the script for our Target.
Let us say we select our
script which is for.
course, so let's say
The cross origin resource sharing vulnerability so
we will select this and let us also select the csrf.
Which are the most common type of web application
based vulnerabilities?
Okay. So let us also select HTTP enum, which will
display us all the
web directories and find out
if there is any directory listing enabled or
not.
You can choose any you want and as many as number of
scripts you want I'm using one more which is HTTP methods
which will tell me which are the supported
HTTP server methods onto the particular
Target.
Alright, I have selected couple of scripting any
scene files. Now. This
all will be added and I
am also going to select one nurse because I have
added one less as well.
Which will run the vulnerability scan.
Now who is domain and who is IP to get the
who is information as well? As you can see over here,
you will see all the NSE scripts that you are selecting
comes over here. So because we are
making a new profile it will show you something like this.
We will keep this target blank. If you want to add decoys
you can add decoys if you want to set a
source IP address or a source Sports scan
or you want to select interface you can do all those other tuning
as well. Okay, so we are not going to do any of
such tuning right now.
So I think we are good to save our profile the
test profile right now. So I will just click on.
Save changes. So once I click on Save changes,
my profile will be created. So let us
do a quick scan this time.
so
we are going to run a quick scan and let us select our
profile that is Rohit 3 cons profile and I will
hit scan.
As you can see the scan has started on my local machine.
And you can see these are the scripts which
are being running. So the end map output is being shown
over here.
on my particular Target
the OS detection is happening right now because it was added
into the script after that HTTP calls
csrf enum methods these types
of scripts are going to run.
As you can see the scan has completed successfully and
this is the output obviously there is no Port
80 open or web application, which is running. That's why
we have not got any of the vulnerabilities.
All right, we can also scan a live domain or
any such of domain or IP
address.