Service, inversion detection.
And Matt, as we target.
It's been scanning within map, it's not enough to obtain just the open port information.
With his information, it's pretty necessary to know the name in the version of the service running
on the open port.
Yeah.
So the version information will give us more insight into what are the possible attacks that we could
actually launch.
So there's a database of more than 2200 services and in MAP.
Where is that database?
It's in the user share and map and map services.
So the database contains the names of the services it can operate according to the board information.
For example, Port 80, of course, is mostly used by HDP service.
Ward 53 is usually used by the DNS service.
The point here is that the port numbers do not always belong to the servant mentioned that earlier,
but I want to make this clear.
So it means that the system administrator can change the HTTP service 80 to 12, 80 from within the
program.
So in this case, the port number and the service running on that board must be detected and verified.
So for this purpose and MAP uses the map service probes database.
So this database is located in user share and map and map service probes.
And this database will contain different query statements for each service.
So it'll try to detect this service and the version running on the and map word by running these query
statements.
So Unmap is very successful with this.
And then when you're armed with this information.
You may discover there may be different vulnerabilities depending on the version of each service.
And, of course, specific vulnerabilities can be attacked.
Is therefore necessary to use the S.V. parameter when scanning within map.
So I'll show you an example.
Open virtual box open carry Linux 10 zero 2.0 one five.
Open Métis voidable and 022 not for.
Log in to Callisthenics, Vimes.
Username route, password tour.
And open terminal.
So right, this command and map 10 dot zero, dot two, not four top courts, 10 press enter.
And the scan results are you're.
As you can see, it only lists the port names, numbers, Port St., whether they're open or close as
well as the service names.
So now do the same operation with the S.V. parameter.
And map 10, that zero do not for top ten as V and press enter.
The scan results are here now.
And of course, scanning with the as the parameter will take a little bit longer.
But as you can see here, the version information of the open ports has been added to the list.
So that means that according to the version information that we gather here, we can develop attacks
specific to our target system.