Nmap - Revision history

Ikramer at 14:35, 9 March 2023

2023-03-09T14:35:18Z

← Older revision		Revision as of 14:35, 9 March 2023
Line 58:		Line 58:
	* https://nmap.org/		* https://nmap.org/

	[[Category:~~Documentation~~]]		[[Category:Pentesting]]

DCiklusic: /* References */

2023-01-27T19:35:18Z

References

← Older revision		Revision as of 19:35, 27 January 2023
Line 56:		Line 56:

	== References ==		== References ==

	* https://nmap.org/book/man-nse.html
	* https://nmap.org/		* https://nmap.org/

	[[Category:Documentation]]		[[Category:Documentation]]

DCiklusic at 18:00, 27 January 2023

2023-01-27T18:00:59Z

← Older revision		Revision as of 18:00, 27 January 2023
Line 52:		Line 52:
	Example of usage of vulners script:		Example of usage of vulners script:

	[[Nmap_script_vulners.png]]		[[File:Nmap_script_vulners.png]]

	~~== Used Hardware ==~~

	~~== Courses ==~~


	== References ==		== References ==

	* https://~~wikipedia~~.org		* https://nmap.org/book/man-nse.html
	* https://~~google~~.~~com~~		* https://nmap.org/

	[[Category:Documentation]]		[[Category:Documentation]]

DCiklusic: /* Nmap Script Engine */

2023-01-27T18:00:07Z

Nmap Script Engine

← Older revision		Revision as of 18:00, 27 January 2023
Line 51:		Line 51:

	Example of usage of vulners script:		Example of usage of vulners script:

			[[Nmap_script_vulners.png]]

	== Used Hardware ==		== Used Hardware ==

DCiklusic: /* Nmap Script Engine */

2023-01-27T17:59:24Z

Nmap Script Engine

← Older revision		Revision as of 17:59, 27 January 2023
Line 49:		Line 49:

	• Script for specific operating system: The "smb-os-discovery" script can be used to determine the operating system of a Windows host. This script can be run with the command "nmap --script smb-os-discovery [target]".		• Script for specific operating system: The "smb-os-discovery" script can be used to determine the operating system of a Windows host. This script can be run with the command "nmap --script smb-os-discovery [target]".

			Example of usage of vulners script:

	== Used Hardware ==		== Used Hardware ==

DCiklusic: /* Description */

2023-01-27T17:56:46Z

Description

← Older revision		Revision as of 17:56, 27 January 2023
Line 21:		Line 21:
	Example of nmap output on a specific host:		Example of nmap output on a specific host:

	[[File:~~Nmap output on a specific host~~.png]]		[[File:Nmap_output_on_specific_host.png]]

	== Nmap Script Engine ==		== Nmap Script Engine ==

DCiklusic: /* Description */

2023-01-27T17:56:16Z

Description

← Older revision		Revision as of 17:56, 27 January 2023
Line 20:		Line 20:

	Example of nmap output on a specific host:		Example of nmap output on a specific host:

			[[File:Nmap output on a specific host.png]]

	== Nmap Script Engine ==		== Nmap Script Engine ==

DCiklusic: /* Nmap Script Engine */

2023-01-27T17:53:49Z

Nmap Script Engine

← Older revision		Revision as of 17:53, 27 January 2023
Line 38:		Line 38:
	Here are a few examples of how NSE can be used:		Here are a few examples of how NSE can be used:

	• Vulnerability detection: One of the most popular NSE scripts is "vulners", which can be used to detect known vulnerabilities in a host or service. This script uses a vulnerability database to check for known vulnerabilities and can be run with the command "nmap --script vulners [target]".		• Vulnerability detection: One of the most popular NSE scripts is "vulners", which can be used to detect known vulnerabilities in a host or service. This script uses a vulnerability database to check for known vulnerabilities and can be run with the command "nmap --script vulners [target]"

			• Information gathering: The "http-title" script can be used to gather the title of a website. The script sends an HTTP request to the target and parses the response to extract the title. This script can be run with the command "nmap --script http-title [target]"

			• Brute-forcing: The "ssh-brute" script can be used to perform a brute-force attack on an SSH service. The script tries to log in to the SSH service using a list of username and password combinations. This script can be run with the command "nmap --script ssh-brute [target]".

			• Script for specific service: The "smb-enum-shares" script will enumerate the shared resources on the SMB service. This script can be run with the command "nmap --script smb-enum-shares [target]".

			• Script for specific operating system: The "smb-os-discovery" script can be used to determine the operating system of a Windows host. This script can be run with the command "nmap --script smb-os-discovery [target]".

	== Used Hardware ==		== Used Hardware ==

DCiklusic: /* Nmap Script Engine */

2023-01-27T17:52:11Z

Nmap Script Engine

← Older revision		Revision as of 17:52, 27 January 2023
Line 39:		Line 39:

	• Vulnerability detection: One of the most popular NSE scripts is "vulners", which can be used to detect known vulnerabilities in a host or service. This script uses a vulnerability database to check for known vulnerabilities and can be run with the command "nmap --script vulners [target]".		• Vulnerability detection: One of the most popular NSE scripts is "vulners", which can be used to detect known vulnerabilities in a host or service. This script uses a vulnerability database to check for known vulnerabilities and can be run with the command "nmap --script vulners [target]".

	Information gathering: The "http-title" script can be used to gather the title of a website. The script sends an HTTP request to the target and parses the response to extract the title. This script can be run with the command "nmap --script http-title [target]".

	== Used Hardware ==		== Used Hardware ==

DCiklusic: /* Nmap Script Engine */

2023-01-27T17:50:55Z

Nmap Script Engine

← Older revision		Revision as of 17:50, 27 January 2023
Line 31:		Line 31:
	• Brute-forcing: NSE scripts can be used to perform brute-force attacks on services such as SSH or Telnet.		• Brute-forcing: NSE scripts can be used to perform brute-force attacks on services such as SSH or Telnet.

	~~=== Step 2 ===~~		NSE scripts can be run individually or in combination with other scripts. Nmap ships with a large number of built-in scripts that can be used for various tasks. Additionally, the Nmap community has written and shared many more scripts that can be downloaded and used.

	~~Make sure~~ to ~~read~~		Using NSE scripts can greatly enhance the functionality of Nmap and allow for more detailed and efficient network scans.


			Here are a few examples of how NSE can be used:

			• Vulnerability detection: One of the most popular NSE scripts is "vulners", which can be used to detect known vulnerabilities in a host or service. This script uses a vulnerability database to check for known vulnerabilities and can be run with the command "nmap --script vulners [target]".

			Information gathering: The "http-title" script can be used to gather the title of a website. The script sends an HTTP request to the target and parses the response to extract the title. This script can be run with the command "nmap --script http-title [target]".

	== Used Hardware ==		== Used Hardware ==