Original subtitles

1

Service and version detection and map as V.

2

Target 1 scanning within map.

3

It's not enough to obtain just the open port information with his information.

4

It's pretty necessary to know the name and the version of the service running on the open port.

5

Yeah.

6

So the version information will give us more insight into what are the possible attacks that we could

7

actually launch so there's a database of more than 20 200 services and in map whereas any database it's

8

in the user share and map and map services.

9

So the database contains the names of the services that can operate according to the port information.

10

For example port 80 course is mostly used by HDD P service Ward 53 is usually used by the DNS servers.

11

The point here is that the port numbers do not always belong to the server mentioned that earlier but

12

I want to make this clear.

13

So it means that the system administrator can change the HDD Peace Service 80 to Twelve eighty from

14

within the program.

15

So in this case the port number and the service running on that board must be detected and verified

16

over this purpose and map uses the end map service probes database so this database is located in user

17

share and map and map service probes and this database will contain different query statements for each

18

service so it will try to detect this service and the version running on the end map work by running

19

these weary statements so and map is very successful with this and then when you're armed with this

20

information you may discover there may be different vulnerabilities depending on the version of each

21

service of course specific vulnerabilities can be attacked.

22

It is therefore necessary to use the S V parameter when scanning within map so I'll show you an example

23

open virtual box.

24

When Kelly Linux tender 0 that that 1 5 open meadows Floyd will end at zero to do that for log into

25

Kelly Linux VM Ms user name root password to her and open terminal so right this command and map 10

26

dot 0 0 dot to dot for top ports 10 press enter and the scan results her year as you can see it only

27

lists the port names numbers word state whether they're open or closed as well as the service names.

28

So now do the same operation with the S V parameter and map 10 that zero dot do dot for top ports 10

29

S V and press enter the scan results are here now of course scanning with the V parameter will take

30

a little bit longer.

31

But as you can see here the version information of the open ports has been added to the list so that

32

means that according to the version information that we gather here we can develop attacks specific

33

to our target system.