1
00:00:00,210 --> 00:00:06,600
‫Here is another example, source of an unmap script in addition to the code part, which is to execute

2
00:00:06,600 --> 00:00:12,690
‫the job of the script, it includes some additional sections, such as description categories, usage,

3
00:00:12,690 --> 00:00:14,730
‫author, license type, etc..

4
00:00:15,660 --> 00:00:21,300
‫Instead of probing the script code to understand the details of an end map script, you can use script,

5
00:00:21,300 --> 00:00:23,550
‫dash, help, parameter lövin, map command.

6
00:00:24,490 --> 00:00:30,040
‫You will see the name, the categories, the link to deep search and the description sections as the

7
00:00:30,040 --> 00:00:32,880
‫result of the script Dash helped query.

8
00:00:33,160 --> 00:00:39,550
‫So you've heard me say before, but I really need to emphasize the importance of the service and version

9
00:00:39,550 --> 00:00:42,940
‫detection once again in this and map scripting lecture.

10
00:00:43,300 --> 00:00:49,960
‫As you know, if you don't run the version, detection and MAP supposes that the default service is

11
00:00:49,960 --> 00:00:51,100
‫running on that port.

12
00:00:52,210 --> 00:00:58,360
‫In a scrip scan and Maps opposes the default services running on the port, so it runs the scripts as

13
00:00:58,360 --> 00:00:59,990
‫if they are suitable for that service.

14
00:01:00,100 --> 00:01:02,290
‫It's easy to see it in an unmapped query.

15
00:01:02,980 --> 00:01:05,250
‫OK, open a terminal screen in Colly.

16
00:01:05,770 --> 00:01:13,480
‫I use that command to see the listening ports as you see S8 services running, but it's not running

17
00:01:13,480 --> 00:01:14,560
‫on Port 22.

18
00:01:14,560 --> 00:01:19,870
‫Instead it's running on Port four, four, three and as you know, four, four three is the default

19
00:01:19,870 --> 00:01:22,120
‫port of the service.

20
00:01:22,980 --> 00:01:28,420
‫So if I run a port scan for my colleagues Port four three without adding the version detection option.

21
00:01:32,660 --> 00:01:35,880
‫And maps, signs the board is running an HTTPS service.

22
00:01:36,440 --> 00:01:41,750
‫Now, if I had DSH Gribbs in this query using script S.H. Asterisk.

23
00:01:42,860 --> 00:01:49,040
‫Without diversion detection, not any of the scripts run because and Map thinks of the services https,

24
00:01:49,160 --> 00:01:52,490
‫not S.H. and is not run the SSA scripts.

25
00:01:53,520 --> 00:01:59,940
‫So I call the latest and map query and add version detection using the S uppercase V this time.

26
00:02:00,940 --> 00:02:07,000
‫Like that S.H. grips her, started with the version detection option and Map finds that the service

27
00:02:07,000 --> 00:02:11,710
‫is S.H. and not https very important.

28
00:02:12,110 --> 00:02:16,580
‫OK, so SSA Brut script takes a long time to run.

29
00:02:17,110 --> 00:02:18,220
‫We already got the point.

30
00:02:18,220 --> 00:02:20,740
‫So no need to wait for the results of the scripts.