Original subtitles

1

And map script engine or NSC.

2

So what do you suppose script scanning would be so and map is indeed a software for Port scanning purposes

3

right.

4

It can also be used for pen test purposes using its advanced features and map has started to be developed

5

as a port scanning tool and today it has exceeded itself with its vulnerability and exploitation features

6

so the in map scripting engine or NFC is one of N maps more powerful and flexible features so it allows

7

users to write and share simple scripts to automate a wide range of network scanning tasks these scripts

8

are then executed in parallel with the speed and efficiency that we would expect from any map.

9

Users can use scripts distributed within map or write themselves to meet their specific needs

10

NSC consist of scripts in these following categories defined categories of broadcast brute default discovery

11

dos exploit external fuzzier intrusive malware safe version and Von so the category names are not case

12

sensitive and well let me just briefly describe each category so these scripts handle authentication

13

information or bypasses it on the target system instead of scripts that use brute force attacks to identify

14

credentials they are placed in this brute category.

15

Broadcast scripts in this category typically discover hosts that are not listed on the command line

16

by publishing to the local network use the new target script variable to allow these scripts to automatically

17

add hosts that they discovered to the end map scan.

18

Q

19

So these scripts use brute force attacks to estimate the authentication information of a remote server

20

and map HDP brute Oracle brute as an MP brute etc. including many scripts that enforce the protocol

21

discovery these scripts attempt to discover more about the network by querying global records as an

22

MP enabled devices directory services and so on and so forth.

23

So D OS scripts in this category can cause denial of service sometimes it is done to test the vulnerability

24

for denial of service method.

25

But more generally it is undesirable because of the side effect required to test a conventional vulnerability.

26

In other words these test sometimes crash sensitive services

27

exploit these scripts are intended to actively exploit a vulnerability external scripts in this category

28

can send data to a third party database or another network resource.

29

For example who is IP establishes a connection to the WHO is servers to obtain information about the

30

destinations.

31

Address the operators of the third party database probably record everything that comes into them.

32

So this will log your IP address and the destination address most scripts that do not fall into this

33

category contain absolute traffic between the scanning computer and the client

34

fuzzier scripts in this category are designed to send unexpected or random fields by the server software

35

and each package although the technique is useful for finding undiscovered errors and vulnerabilities

36

in software.

37

It runs both slowly and uses a lot of bandwidth.

38

An example of a script in this category is DNS Fuzz which slightly bombs a DNS server with incorrect

39

domain requests until the server crashes or a user defined time limit expires.

40

Intrusive these scripts cannot be classified into a secure category because the risks may be high enough

41

to destroy the target system.

42

It can fully exploit the resources that means bandwidth CPE you ram of the target system therefore they

43

are perceived as unwanted processes by system administrators.

44

As you may very well imagine malware these scripts test whether the target platform is affected by malware

45

or back doors.

46

For example S.M. T.P. strange port which monitors as MTBE servers running on unusual port numbers and

47

off spoof which identifies similar fraud numbers.

48

It give a fake answer before receiving a query both of these behaviors are usually caused by malware

49

infection safe scripts that are not designed to crash.

50

Services use large amounts of bandwidth or other resources or exploit vulnerabilities.

51

They're are less likely to harm remote administrators but we cannot guarantee that they will never cause

52

adverse reactions.

53

As with other and map features so most of them are performing general network discovery scripts in this

54

category are not classified for security but all other unsafe scripts should be placed as intrusive

55

version so scripts in this particular category aren't extension of the version detection feature and

56

cannot be explicitly selected their selected run.

57

Only when version detection as a V is requested outputs are indistinguishable from version detection

58

output and do not generate servers or hosts script results.

59

Vollmann these scripts check for specific known vulnerabilities and typically report results only if

60

they are found.

61

Default so this is used with a C or the a parameter scripts defined in the default category are speed

62

usefulness verbosity reliability intrusiveness privacy script equals can be used with a default parameter

63

so in map script files in the scripts folder if you don't know the folder name you can list all the

64

scripts when you run locate NSC on the command line.

65

If you're looking for a specific script for a specific topic then just type it into the command line

66

if you want to.

67

You can always edit the scripts.

68

You can review them make change it.

69

For example if we are looking for DNS related scripts we just need to type in the command line.

70

Current NSC scripts are available at any map dot org.

71

You can view all scripts and usage patterns at this address and that dot org.

72

And as a doc so in map since NSC is open source it's constantly updated.

73

Therefore it is necessary to update the script database before scanning with scripts.

74

Yeah

75

so to do this you just run the command script update.

76

Now there are a few parameters to use in the script within map.

77

And I'll show you a few of them and map.

78

See if we only use the SC parameter and map scans for each IP in port with scripts defined in the default

79

category and map.

80

Script.

81

Script name target.

82

So in this case and map will scan with the specified script so if you want to get help with a script

83

we can use and map script help.

84

Script name and map scripts can be used with other parameters as well with a script that we use here

85

must be compatible with the service that we scan might not seem obvious but so let's write a few examples

86

of any map commands.