TryHacKMe | Nmap | Part 2 Walkthrough

hey guys welcome to my channel this is actually a re-record of the map series I recording for the part two from Tas 9 to5 but the light went out so um I'm redo this again so I already load the attack box well it's loading again but let's split view anyways let's get right into it it's going to be task 10 I believe is it 10 or yeah it's definitely 10 because I already did scan types so we're going to do Tas 10 NS e scripts overview so it talks about different scripts save intrusive vable and as you know guys I'm just going to show you how to answer these questions and uh I strongly recommend to read through each task so answer your questions below what language are nsse scripts are written in is Lua you can find it right here NC scripts are written in L programming language and can be used to do variety of things from scanning automating exports last question which category of scripts would be a very bad idea to run in production environment and I put intrusive and as you redo the categories you can see it says intrusive not save likely to affect the target okay all right so next one is Tass lman NSE scripts working with NSE so it talks about this SCC script and talks about the commands and answer questions below what are the optional arguments can the FTP d.n script take so you read through the paragraph there's NS map we can do this copy this all right so you read through it so script arguments ftba a. Max list the max number of files return directly listing so that's why there's Max list all right Tas 12 NSE scripts scripting for scripts all right so these are just various ways of looking finding scripts there's the file head group list so uh show split view and this how you find these answers so answer your questions below search for NSP scripts in the/ USR share map scripts directly using either of the demonstrated methods what is the file name of the script which determines Ally OS of the NP server so let's change uh CD USR sh map scripts all right so you list OS and SMB right so SMP S&P you read through it there's this one SMB o so the same thing so that's how I found this answer it says red the the script what does it depend so let's uh clipboard this copy this so you can do this file script hit script so basically say file what kind file is this pcee and let's see can you read the head nope and it's talking about what does it depend doesn't show the dependency so it says to read it right so I'm going to C it oops so it opens up this uh file or scpt whatever you like to call it you scroll up and it say right here dependency SMB brute that's I got all right Tas 13 firewall Invasion so it talks about DF dmtu scan delay and bat some and say answer questions below which simple frequently rely upon Pros often block requiring the use of a that terminate that oops sorry I meant to as again which simple and frequently rely upon PRS often block requiring the use of the- PN switch so as you read right here PM which tell not to bottom ping the host before scan this means the ount will always treat a Target being LLY bypassing the is icmp block so I see and then says research which end map switch allows you to pen and Arch arber Archy L for random data at the end of packets so when it says research I usually just Google and it says the arguments D data- length which I have tells M to Generate random bytes and pend them as data the requests so all right so task 14 practical use what you learn to scan the target machine answer questions below note if you're not subscribed make sure this machine has had around 10 minutes started so let's show split view answer questions below does the Target IP respond to icmp Echo pin request yes or no so so what we're going to do is Ping sweep so this is just example M m- SN IP but we're going to use this one all right [Applause] so so what's my IP so is your IPS might be different so yeah 10.10 23185 and it says no because right here my address unknown so I'm not sure it says perform X mix scan on the first 99 ports of the target Target how many ports are shown to be open or filter so X Miss so we're going to go back to test 8 so it's going to be xmiss and it says Port right dasp one through 999 and and do that so m x my scan the IP ports I should space here didn't I but still works and say all 99 scan ports are open so that's why the answer n there's a reason given for this Dash what is it the answer will be in your scan results think carefully about which which is to use and read the hint before asking for help run this command with the- VV switch enable it's good props always increase Verity in our a scans and yeah so say no response if I don't do that is on say so so that's no responses and then next question perform a TCP sin scan on the first 5,000 ports of the target D Dash how many many parts are shown to be open so while the dash VV doesn't show you no response so so it's going to be TCP 5,000 V one two three four five that's how I got the five ports says open wire shark and perform a TCP connect scan against port on the port 80 monitoring the result make sure you understand what's going on deploy the FTP d a non script against the Box can map login successfully to FTV server on Port 21 okay let's see so TPC connect and it wants 21 no it's asking for scripts right so it's going be Das script equals save or is this one so I'm G try our script so map Das script equals FTP Aon then TCP scan against this IP address Port 81 see scan oh no asss allow so let's try FTB 10.12 13185 login fail remote un next but you see you can log in anyways yes there you go guys that's it task 15 conclusion is this answer questions only conclusion and it says there's lot of resources on map so what's this documentation yeah so m.org read it on your off time and um yeah click complete hit Twitter show on Twitter Facebook LinkedIn you like this video please hit the like button hit the Subscribe button notification button comment on my videos you like the video you don't like it um yeah so the next one are reset it it's going to be network service network services and uh yeah thanks for watching guys till the next video see you

Channel: PLei

Views: 40

Keywords: Nmap, TryHackMe

Id: 3jiaKi_ErRY

Length: 14min 54sec (894 seconds)

Published: Mon Feb 19 2024