WEBVTT - This file was automatically generated by VIMEO 1 00:00:07.200 --> 00:00:10.600 Welcome back to another video from section 5. A script engine 2 00:00:10.600 --> 00:00:13.200 part. 3 with a packings to 3 00:00:13.200 --> 00:00:16.300 do. The second video from section 53. In 4 00:00:16.300 --> 00:00:19.500 this video. We're going to talk about 5 00:00:19.500 --> 00:00:23.400 and have an overview. Your HTTP scripts as 6 00:00:23.400 --> 00:00:26.600 you know, deserve Rarity of this criticism and mapped engine. 7 00:00:26.900 --> 00:00:29.400 So if you scan, take a look at 8 00:00:29.700 --> 00:00:29.900 some of 9 00:00:30.600 --> 00:00:33.100 Them and explain about them. There's nothing the 10 00:00:33.100 --> 00:00:36.400 last videos and previous videos. You can find all 11 00:00:36.400 --> 00:00:40.400 the sleepy and scraped name a scripts, but 12 00:00:39.400 --> 00:00:42.500 let's go and have some really on 13 00:00:42.500 --> 00:00:42.800 them. 14 00:00:44.200 --> 00:00:48.200 So, where's our commands? Let's go to our k x. The 15 00:00:48.200 --> 00:00:51.200 here. We are at a callanetics. The first script is 16 00:00:51.200 --> 00:00:54.300 nmap dash of script and 17 00:00:54.300 --> 00:00:57.000 HTTP backup finder. Or did you 18 00:00:57.200 --> 00:01:00.400 exactly here the crimp Von? It is partner website and 19 00:01:00.400 --> 00:01:03.800 attempt to identify the backup copy of discover files. It 20 00:01:03.800 --> 00:01:06.300 does. So by requesting a number of the different combination of 21 00:01:06.300 --> 00:01:09.600 the filename, example, index, dot back 22 00:01:09.700 --> 00:01:11.400 or index.html. 23 00:01:15.200 --> 00:01:18.100 Our second comment. We have nmap Dash p instead of 24 00:01:18.100 --> 00:01:21.800 put a forward and a specific port for Target and 25 00:01:21.800 --> 00:01:24.800 Dasha scraped Mongo database 26 00:01:24.700 --> 00:01:27.300 and Hast. So please 27 00:01:27.300 --> 00:01:31.300 subscribe button to get a list of the tables from mongodb database. The 28 00:01:31.300 --> 00:01:34.500 third one is m f Dash script HTTP, 29 00:01:34.500 --> 00:01:37.200 config backup. So obviously true for a back up. 30 00:01:37.200 --> 00:01:40.400 System files of common content management system and 31 00:01:40.400 --> 00:01:42.000 web server configuration files. 32 00:01:43.900 --> 00:01:44.700 Thanks when he is. 33 00:01:45.800 --> 00:01:48.700 And mad dash of script HTTP, proxy, brick 34 00:01:48.100 --> 00:01:51.600 HP, and stand for the bird and 35 00:01:51.600 --> 00:01:55.000 a Target. So what is it? Exactly? Perform 36 00:01:54.300 --> 00:01:58.400 Brute Force. Password, guessing against HTTP, proxy 37 00:01:57.400 --> 00:01:59.000 servers? 38 00:02:00.700 --> 00:02:01.700 The next one is. 39 00:02:03.700 --> 00:02:06.400 We talked about it in previous videos. So this 40 00:02:06.400 --> 00:02:10.100 is my B overview for you, but the scripts this 41 00:02:09.100 --> 00:02:12.800 is script used on PWD. Be 42 00:02:12.900 --> 00:02:15.500 and brutal, libraries to perform password guessing, 43 00:02:15.800 --> 00:02:18.800 and it's actual guesses are stirred. In nmap registry 44 00:02:18.300 --> 00:02:21.800 using the creds library 45 00:02:21.400 --> 00:02:24.800 for other script ears. So 46 00:02:24.600 --> 00:02:27.200 let's talk about again and map that 47 00:02:27.200 --> 00:02:30.100 rescript HTTP Dash Boot and Stanford opportunity. 48 00:02:31.300 --> 00:02:34.700 The next player and a next comment is nmap 49 00:02:34.900 --> 00:02:37.900 measure script and HTTP, RFI spider, and 50 00:02:37.900 --> 00:02:38.900 Stanford birth. 51 00:02:39.900 --> 00:02:42.600 Crosby. Observers in a search of RFI that 52 00:02:42.600 --> 00:02:45.600 remove file inclusion vulnerabilities as 53 00:02:45.600 --> 00:02:48.800 easy one of the OS, top 10 fewer, 54 00:02:48.800 --> 00:02:51.900 interesting. Loaded it test, every from 55 00:02:51.400 --> 00:02:54.700 presidents find and every permits 56 00:02:54.700 --> 00:02:56.700 of the URL containing a query. 57 00:02:58.800 --> 00:03:01.500 The next one is this first axis with 58 00:03:01.500 --> 00:03:04.900 the default credentials Verity of application as 59 00:03:04.900 --> 00:03:07.400 devices. So what are the common dandruff, Dash p, 60 00:03:07.400 --> 00:03:10.300 84 report and dishes script issue, 61 00:03:10.300 --> 00:03:13.100 beautiful accounts and house or IP. So 62 00:03:13.100 --> 00:03:16.700 it works similar to the airstrip in operation that we talked about in previous videos, 63 00:03:16.900 --> 00:03:19.600 which is a replication by matching noun past 64 00:03:19.600 --> 00:03:22.800 and launching a login routine, using 65 00:03:22.800 --> 00:03:25.400 a default credential when found, this 66 00:03:25.400 --> 00:03:28.100 is crib depends on a fingerprint files contained it. 67 00:03:28.600 --> 00:03:31.700 Informations for example, names categories, location path, 68 00:03:31.100 --> 00:03:34.900 and default, condition and login routine. And 69 00:03:34.900 --> 00:03:37.500 the last comment is upload a local file to 70 00:03:37.500 --> 00:03:41.700 remove the web server using vegetable crude method. You 71 00:03:41.700 --> 00:03:44.400 must specify the file name and URL path with 72 00:03:44.400 --> 00:03:47.200 NSC arguments. So we take 73 00:03:47.200 --> 00:03:50.800 additional closely this one and map Dash p + 4 and 74 00:03:50.800 --> 00:03:53.400 IP and a certain script HTTP period. And 75 00:03:53.400 --> 00:03:56.700 that is your script and we're exceeding the argument and 76 00:03:56.700 --> 00:03:58.300 HTTP Dash boot. Don't Yura. 77 00:03:58.500 --> 00:04:01.300 Well, and we uploading the route me that 78 00:04:01.300 --> 00:04:04.400 PHP initiative product file, an 79 00:04:04.400 --> 00:04:06.600 attempt ruined me dot PHP. 80 00:04:07.700 --> 00:04:10.300 But far from here, we will talk about lot 81 00:04:10.300 --> 00:04:13.900 about Emma by scripting ring and all the scripts. 82 00:04:13.900 --> 00:04:16.300 So we have an overview to make sure you remember all 83 00:04:16.300 --> 00:04:16.600 of them. 84 00:04:18.400 --> 00:04:21.100 I'm not sure who the actual I'm interesting. We're going to 85 00:04:21.100 --> 00:04:24.200 writing an essay screwed on, have introduction to how to 86 00:04:24.200 --> 00:04:27.900 write an assisted by yourself for yourself and customize it 87 00:04:27.300 --> 00:04:30.400 as my you wish. Good luck.