WEBVTT - This file was automatically generated by VIMEO

1
00:00:02.300 --> 00:00:05.200
 Hello everyone. In this video. I'm going to be taking you through how

2
00:00:05.200 --> 00:00:08.400
 to perform service and numeration with nmap scripts or

3
00:00:08.400 --> 00:00:11.400
 the nmap scripting engine for that matter. So

4
00:00:11.500 --> 00:00:14.400
 let's get started. The first thing I want to take you

5
00:00:14.400 --> 00:00:17.900
 through is of course, performing a default and map scripts can.

6
00:00:17.900 --> 00:00:20.300
 So again. What I can do is I can just open

7
00:00:20.300 --> 00:00:23.300
 up the nmap Man pages. And the reason I'm doing this

8
00:00:23.300 --> 00:00:27.100
 is because I want to explain a few things. So I

9
00:00:27.100 --> 00:00:30.400
 will I can just actually just open it up directly because I

10
00:00:30.400 --> 00:00:32.000
 know the actual location of

11
00:00:32.100 --> 00:00:35.500
 What I am going to be taking you through. So if

12
00:00:35.500 --> 00:00:39.100
 we take a look at, we've

13
00:00:38.100 --> 00:00:41.100
 already taken, look at Host Discovery to a

14
00:00:41.100 --> 00:00:44.400
 certain extent and we're going to be taking a look at these scripts can.

15
00:00:44.800 --> 00:00:47.500
 So there. We are you can see that we have the SC option.

16
00:00:47.500 --> 00:00:50.700
 So that is minus lower case, s and uppercase C.

17
00:00:50.100 --> 00:00:53.800
 This will use the default nmap scripts

18
00:00:53.800 --> 00:00:56.800
 within the default and map script directory. Now,

19
00:00:56.800 --> 00:00:59.900
 when we talk about nmap scripts, let

20
00:00:59.900 --> 00:01:01.900
 me explain what they are. If we go on to the

21
00:01:02.100 --> 00:01:05.600
 Nmap website. That is a 10. Mapple, dog, under the book.

22
00:01:05.600 --> 00:01:08.600
 And we have the manual page. You can see that the

23
00:01:08.600 --> 00:01:11.500
 nmap scripting engine is one of n Maps. Most powerful

24
00:01:11.500 --> 00:01:14.300
 and flexible features. It allows users to write and share

25
00:01:14.300 --> 00:01:17.400
 simple scripts using the Lua programming language

26
00:01:17.400 --> 00:01:20.900
 to automate a wide variety of networking tasks.

27
00:01:20.500 --> 00:01:23.200
 These scripts are executed in

28
00:01:23.200 --> 00:01:26.500
 parallel with the speed and efficiency, you would expect from nmap.

29
00:01:26.700 --> 00:01:29.600
 And again, these scripts are used to perform a wide variety

30
00:01:29.600 --> 00:01:32.000
 of networking tasks as I as they've.

31
00:01:32.100 --> 00:01:35.200
 Mentioned here. So the type of functionality that you can

32
00:01:35.200 --> 00:01:38.600
 do are defined or the type of functions that

33
00:01:38.600 --> 00:01:41.900
 you that a script can do are defined in terms of categories.

34
00:01:41.200 --> 00:01:45.100
 And the categories are off broadcasts.

35
00:01:44.100 --> 00:01:47.800
 Default Discovery, dose exploit

36
00:01:47.800 --> 00:01:50.900
 external fossa, intrusive malware safe

37
00:01:50.900 --> 00:01:53.700
 version and Vaughn. All right, so

38
00:01:53.700 --> 00:01:56.100
 you can open up the script categories, to actually take a

39
00:01:56.100 --> 00:01:59.300
 look at the the various categories of scripts that

40
00:01:59.300 --> 00:02:01.900
 you have. Now. We need it. When we take a look at the default.

41
00:02:02.300 --> 00:02:05.600
 Vault script category, you can see that these scripts are the default set

42
00:02:05.600 --> 00:02:08.300
 and are run when the SC option or

43
00:02:08.300 --> 00:02:12.400
 the a option, which is the aggressive scan is invoked. And

44
00:02:11.400 --> 00:02:14.800
 again, that allows you to run the default category.

45
00:02:14.800 --> 00:02:17.300
 Now, this is typically what you would run

46
00:02:17.300 --> 00:02:20.100
 by default and I'll be taking you through scripts manually and

47
00:02:20.100 --> 00:02:23.400
 explaining how they work and what they can do.

48
00:02:23.700 --> 00:02:26.500
 Now, when we talk about nmap, your scripts are typically going

49
00:02:26.500 --> 00:02:29.700
 to be going to be stored under your user share

50
00:02:29.200 --> 00:02:32.000
 nmap directory. On the

51
00:02:32.100 --> 00:02:35.300
 Script, so if I hit enter, it will display all the

52
00:02:35.300 --> 00:02:38.800
 scripts that are currently available to us that we can use. Now.

53
00:02:38.800 --> 00:02:41.900
 These are not going to be sorted into functionality, rather.

54
00:02:41.900 --> 00:02:44.600
 They protocol that year the protocol or

55
00:02:44.600 --> 00:02:47.600
 the service version they are associated to. So

56
00:02:47.600 --> 00:02:50.600
 for example, if we say, we have various

57
00:02:50.600 --> 00:02:53.700
 SMB scripts here, you can see that this SMB script

58
00:02:53.700 --> 00:02:56.800
 will check for smb2 capabilities and

59
00:02:56.800 --> 00:02:59.300
 it has the extension NSE. Now these

60
00:02:59.300 --> 00:03:01.900
 scripts are again a programmed in the

61
00:03:02.300 --> 00:03:05.100
 Lua scripting language, so that means you can actually take a

62
00:03:05.100 --> 00:03:08.400
 look at the scripts you can interact with them. You can develop your own

63
00:03:08.400 --> 00:03:11.300
 so on and so forth. And mainly scripts are just used

64
00:03:11.300 --> 00:03:15.200
 to automate things that you typically do manually. And

65
00:03:14.200 --> 00:03:17.400
 again, with the various categories. These

66
00:03:17.400 --> 00:03:21.200
 scripts can do a lot of things from from performing authentication,

67
00:03:20.400 --> 00:03:23.400
 to performing brute-forcing performing,

68
00:03:23.400 --> 00:03:26.700
 exploitation testing for certain vulnerabilities. So

69
00:03:26.700 --> 00:03:29.300
 on and so forth. So, for example, we can

70
00:03:29.300 --> 00:03:31.900
 scroll all the way to the top. Here, you can see we have various

71
00:03:32.800 --> 00:03:36.000
 HTTP, scripts, that scan, for particular vulnerabilities,

72
00:03:35.600 --> 00:03:38.100
 and the various cve codes are

73
00:03:38.100 --> 00:03:41.400
 listed here. So on and so forth. So again,

74
00:03:41.400 --> 00:03:44.300
 using these scripts is very simple. If we talk about the basic

75
00:03:44.300 --> 00:03:47.400
 usage, first, we can invoke the default category

76
00:03:47.400 --> 00:03:50.500
 of scripts to be run by typing in nmap.

77
00:03:50.500 --> 00:03:53.200
 And then using the SC option, right? We

78
00:03:53.200 --> 00:03:56.300
 can do that or we can use the a option. Now the

79
00:03:56.300 --> 00:03:59.300
 a option refers to an aggressive scan. Now, an

80
00:03:59.300 --> 00:04:01.700
 aggressive scan combines three types of

81
00:04:02.300 --> 00:04:05.500
 Hands together, the aggressive scan combines the

82
00:04:05.500 --> 00:04:08.600
 service version detection. It combines the aggressive

83
00:04:08.600 --> 00:04:11.500
 scan and then combines the default nmap

84
00:04:11.500 --> 00:04:15.200
 scripts can. So. This is an extremely comprehensive scan

85
00:04:14.200 --> 00:04:17.300
 to use. And all you need to do is specify the

86
00:04:17.300 --> 00:04:20.800
 a option. So we can actually do that and that will combine

87
00:04:20.800 --> 00:04:23.500
 service version detection with operating

88
00:04:23.500 --> 00:04:27.100
 system detection. Sorry, that is operating system detection and

89
00:04:26.200 --> 00:04:29.400
 the default script scan, right away

90
00:04:29.400 --> 00:04:31.900
 are. So, again, we can just use the nmap a option.

91
00:04:32.500 --> 00:04:35.800
 And we will combine it with the sin or the stealth scan

92
00:04:35.100 --> 00:04:38.300
 and then we can provide the port.

93
00:04:38.300 --> 00:04:41.200
 So we'll just run it again on the hundred, most common ports so

94
00:04:41.200 --> 00:04:44.800
 that we don't have to waste any time because when we include

95
00:04:44.800 --> 00:04:47.300
 additional type of options in

96
00:04:47.300 --> 00:04:50.100
 our scan, like the scripts can it's going to

97
00:04:50.100 --> 00:04:53.300
 take more time. We'll talk about timing in a later

98
00:04:53.300 --> 00:04:56.200
 video so we can then provide out the IP of

99
00:04:56.200 --> 00:04:59.600
 the target here. So I can say 10.0.0.0 x

100
00:04:59.600 --> 00:05:01.400
 and we hit enter. It's going to say we require

101
00:05:02.100 --> 00:05:05.200
 It privileges, we're going to provide it with root privileges. And

102
00:05:05.200 --> 00:05:08.500
 again, we're just going to wait for this. Can to complete. All

103
00:05:08.500 --> 00:05:11.400
 right, as you can see the scan completes and we now have a

104
00:05:11.400 --> 00:05:14.200
 plethora of new information, that's been given to

105
00:05:14.200 --> 00:05:17.700
 us just by including the default script or

106
00:05:17.700 --> 00:05:20.200
 the default nmap script option. So

107
00:05:20.200 --> 00:05:23.700
 you can see that in addition to

108
00:05:23.800 --> 00:05:26.200
 the results that we typically get in regards to

109
00:05:26.200 --> 00:05:29.600
 the port, the state of the port, what service and

110
00:05:29.600 --> 00:05:31.900
 the service version at the bottom.

111
00:05:32.700 --> 00:05:35.100
 Of that particular service, which is again is going

112
00:05:35.100 --> 00:05:39.000
 to be indented, you can see that. We now have new information. So

113
00:05:38.100 --> 00:05:41.700
 for example, we have FTP cyst here.

114
00:05:41.700 --> 00:05:44.400
 Now FTP cyst. This is in

115
00:05:44.400 --> 00:05:47.200
 reference to the FTP cyst script. So

116
00:05:47.200 --> 00:05:50.100
 it's actually listing out. What script was used to

117
00:05:50.100 --> 00:05:53.400
 scan. And what, what the FTP cyst script does is

118
00:05:53.400 --> 00:05:56.300
 it actually just displays the actual system that is

119
00:05:56.300 --> 00:05:59.500
 being used or the actual operating

120
00:05:59.500 --> 00:06:01.900
 system on which this FTP.

121
00:06:02.200 --> 00:06:05.400
 Oh is being run in this case? It tells us that Windows 8 and

122
00:06:05.400 --> 00:06:08.900
 D is being is so you can see that this n that this FTP script

123
00:06:08.900 --> 00:06:11.800
 is giving us valuable information regarding what

124
00:06:11.800 --> 00:06:14.200
 operating system is running. You then have

125
00:06:14.200 --> 00:06:17.600
 the SSH host key script, which is running on the SSH

126
00:06:17.600 --> 00:06:20.500
 and that essentially just gives us the SSH host

127
00:06:20.500 --> 00:06:23.600
 key. Not really that information in important information.

128
00:06:23.600 --> 00:06:26.200
 And then you have the port 80, which is

129
00:06:26.200 --> 00:06:29.200
 a web server. And then for the port 80, or

130
00:06:29.200 --> 00:06:32.000
 for the web server, you can see that it runs through.

131
00:06:32.500 --> 00:06:36.000
 Scripts by default. It runs the HTTP method script.

132
00:06:35.300 --> 00:06:38.400
 It runs the HTTP server header, which

133
00:06:38.400 --> 00:06:42.100
 tells us the actual server header or the server-side technology

134
00:06:41.100 --> 00:06:44.700
 being used in this case. It's Microsoft is

135
00:06:44.900 --> 00:06:48.100
 7.5. And then the HTTP titled

136
00:06:47.100 --> 00:06:50.100
 that's being used. In this case. It tells us that the

137
00:06:50.100 --> 00:06:53.700
 site doesn't have a title. So immediately we are getting tons

138
00:06:53.700 --> 00:06:56.400
 of more important information regarding our

139
00:06:56.400 --> 00:06:59.600
 targets. And if again, we take a look at the proxy, you

140
00:06:59.600 --> 00:07:01.800
 can see that. Just the uses the http.

141
00:07:02.600 --> 00:07:05.200
 TTP title script here and that tells us that we

142
00:07:05.200 --> 00:07:08.400
 have glassfish server and the server is running. So

143
00:07:08.400 --> 00:07:11.400
 that is how to use the the how to use nmap scripts.

144
00:07:11.400 --> 00:07:14.700
 And I've talked about invoking, the default nmap scripts can.

145
00:07:14.300 --> 00:07:17.800
 Now we can also use scripts individually, which

146
00:07:17.800 --> 00:07:20.700
 is really where I want to demonstrate the

147
00:07:20.700 --> 00:07:23.600
 power of n map because that's where things get really,

148
00:07:23.600 --> 00:07:26.300
 really interesting. So again, if

149
00:07:26.300 --> 00:07:29.000
 we take a look at our Target here, right over here.

150
00:07:29.400 --> 00:07:32.700
 You can see that we have multiple. We have

151
00:07:32.700 --> 00:07:35.100
 multiple ports and services, and we

152
00:07:35.100 --> 00:07:38.200
 have multiple types of scripts that we can

153
00:07:38.200 --> 00:07:41.500
 run. So again, if I list out the scripts within the

154
00:07:41.500 --> 00:07:44.300
 nmap scripts directory again, this

155
00:07:44.300 --> 00:07:47.300
 will list out all the scripts that we can use. And again, we can start

156
00:07:47.300 --> 00:07:50.300
 using these scripts to enumerate more information from

157
00:07:50.300 --> 00:07:53.200
 our Target. So if we are talking about the web server, for

158
00:07:53.200 --> 00:07:56.600
 example, I can use the HTTP genome

159
00:07:56.600 --> 00:07:58.600
 script and the way I can list out all

160
00:07:59.400 --> 00:08:02.300
 Scripts is, I can, I can graph this. I can pipe

161
00:08:02.300 --> 00:08:06.000
 + grip and say, I want to use an expression will say HTTP,

162
00:08:05.400 --> 00:08:08.600
 and I can then list out all the HTTP

163
00:08:08.600 --> 00:08:11.100
 scripts that we can use. Now, the script, the

164
00:08:11.100 --> 00:08:14.100
 script that I want to use in regards to http is

165
00:08:14.100 --> 00:08:17.100
 going to be the HTTP enum script, and I'm going to

166
00:08:17.100 --> 00:08:20.200
 be taking you through, only the most important one, which is

167
00:08:20.200 --> 00:08:23.600
 the one right over here. So we want to use HTTP enum to

168
00:08:23.600 --> 00:08:26.100
 use a single script. It is important that, you

169
00:08:26.100 --> 00:08:29.000
 know what, service you're targeting. And what,

170
00:08:29.500 --> 00:08:32.900
 Is this script is designed to be run on. So

171
00:08:32.900 --> 00:08:35.300
 in our case, if I say and

172
00:08:35.300 --> 00:08:38.200
 map and I can run as stealth scan to

173
00:08:38.200 --> 00:08:41.400
 run a single script. I say script, and that is done using

174
00:08:41.400 --> 00:08:44.400
 two - or two dashes, and we say script and

175
00:08:44.400 --> 00:08:48.800
 then we specify the script name. So HTTP, HTTP

176
00:08:48.800 --> 00:08:49.900
 e now, right.

177
00:08:51.600 --> 00:08:54.800
 And then I specify the target. So 10.10 sorry.

178
00:08:54.800 --> 00:08:57.300
 10.0.0.0 six and

179
00:08:57.300 --> 00:09:00.400
 I hit enter, it's going to ask me for root privileges. I'm going to provide it

180
00:09:00.400 --> 00:09:03.900
 with root privileges so you can see it will will

181
00:09:03.900 --> 00:09:06.500
 start the scan and we're just going to let that's can run.

182
00:09:06.800 --> 00:09:09.300
 And you can see that this is now going to scan all the

183
00:09:09.300 --> 00:09:12.100
 default ports, which is exactly wanted what I

184
00:09:12.100 --> 00:09:15.700
 wanted to point out. So, if we are only scanning the web server,

185
00:09:15.200 --> 00:09:18.700
 it only makes sense that we provide only

186
00:09:18.700 --> 00:09:21.300
 the web server Port that we want to Target.

187
00:09:21.400 --> 00:09:24.400
 We can say, I won't you only to Target Port

188
00:09:24.400 --> 00:09:27.700
 80 and port 8080 because we have a proxy running

189
00:09:27.900 --> 00:09:30.100
 on port 8080, solid. And now

190
00:09:30.100 --> 00:09:33.200
 you see the scan is much more efficient because we are only

191
00:09:33.200 --> 00:09:36.200
 scanning the ports that are relevant and we're using the script that

192
00:09:36.200 --> 00:09:39.300
 is relevant to those ports. And there we are. So you can

193
00:09:39.300 --> 00:09:42.600
 see that for Port 80. We don't get any important

194
00:09:42.600 --> 00:09:45.600
 information, HTTP. Enum simply lists

195
00:09:45.600 --> 00:09:48.400
 out the directory of that web server, so

196
00:09:48.400 --> 00:09:51.300
 you can see for the proxy, it gives us a bit of

197
00:09:51.400 --> 00:09:54.900
 of of shellcode here and it tells us that

198
00:09:54.500 --> 00:09:57.900
 it. But this particular, this

199
00:09:57.900 --> 00:10:00.700
 particular proxy is vulnerable to

200
00:10:00.700 --> 00:10:03.300
 directory traversal, which is very

201
00:10:03.300 --> 00:10:07.100
 interesting. So again, it's already revealing potential vulnerabilities

202
00:10:06.100 --> 00:10:09.800
 within the system and that is just by invoking one.

203
00:10:09.800 --> 00:10:12.300
 Simple HTTP script. Now as I said,

204
00:10:12.300 --> 00:10:15.300
 there's tons of HTTP scripts that

205
00:10:15.300 --> 00:10:18.400
 you can use. One of my favorite is the ability to test and

206
00:10:18.400 --> 00:10:21.200
 see if we have a web application firewall.

207
00:10:21.400 --> 00:10:24.200
 Nothing. And you can run this against websites to

208
00:10:24.200 --> 00:10:27.100
 detect. If there's a web application, firewall running. You can

209
00:10:27.100 --> 00:10:30.700
 also use the HTTP wife fingerprint script, which

210
00:10:30.700 --> 00:10:33.600
 will actually tell you what web application firewall

211
00:10:33.600 --> 00:10:36.600
 is running, which is fantastic. Now, as

212
00:10:36.600 --> 00:10:39.400
 I said, we can take a look at tons of scripts that

213
00:10:39.400 --> 00:10:42.400
 we can run as Z by default. You want to run the default nmap

214
00:10:42.400 --> 00:10:45.500
 scripts. Can however, let's talk about a few

215
00:10:45.700 --> 00:10:48.800
 Windows type scans. Now, given that met exploitable 3

216
00:10:48.100 --> 00:10:51.200
 doesn't have or again.

217
00:10:51.300 --> 00:10:54.100
 It it it has a SMB ports running, but we

218
00:10:54.100 --> 00:10:57.400
 can actually take a look at that shortly. Let's take a look at some of the,

219
00:10:57.200 --> 00:11:00.500
 some of the cves or

220
00:11:00.500 --> 00:11:03.300
 Windows exploits that nmap scripts that we

221
00:11:03.300 --> 00:11:06.400
 can actually scan for with with nmap script. So

222
00:11:06.400 --> 00:11:10.000
 if I just clear this out right over here, we

223
00:11:09.200 --> 00:11:12.900
 can actually scan for a popular vulnerability

224
00:11:12.900 --> 00:11:15.500
 that again is we

225
00:11:15.500 --> 00:11:18.600
 again we can use. So again if I just open up google.com and

226
00:11:18.600 --> 00:11:21.100
 I searched for a vulnerability called MS.

227
00:11:21.400 --> 00:11:24.800
 08, so 2008. So that's 08

228
00:11:24.800 --> 00:11:28.400
 and we say oh 67, right? So all 67 and

229
00:11:28.400 --> 00:11:31.600
 we just opened that up. We'll just open up one of these ones,

230
00:11:31.600 --> 00:11:35.900
 right? A via the Microsoft bulletin security bulletins and

231
00:11:35.900 --> 00:11:38.200
 we can open up rapid7 year. So again, you can

232
00:11:38.200 --> 00:11:41.300
 see, we can take a look at the affected and

233
00:11:41.300 --> 00:11:45.200
 unaffected software. You can see for Windows. It

234
00:11:45.200 --> 00:11:48.200
 does, it affects Windows Server, 2008. There

235
00:11:48.200 --> 00:11:51.200
 we are. So again, this vulnerability of fix Windows server.

236
00:11:51.300 --> 00:11:54.900
 A 2008. So we can actually run this particular script. So

237
00:11:54.900 --> 00:11:57.600
 this script is an SMB script. And

238
00:11:57.600 --> 00:12:00.800
 so what we can do is we can run the same script here. We

239
00:12:00.800 --> 00:12:03.500
 can say in map SS. We're

240
00:12:03.500 --> 00:12:06.700
 honest. It's a stealth scan and we'll say we want to.

241
00:12:06.700 --> 00:12:09.500
 We can also fragment the packets

242
00:12:09.500 --> 00:12:12.400
 because we're dealing with the firewall if I disable the firewall for

243
00:12:12.400 --> 00:12:15.400
 a second here. So I'll just say open up this and I just disable

244
00:12:15.400 --> 00:12:18.200
 the firewall because I do not want to cover that

245
00:12:18.200 --> 00:12:21.200
 right now. I'm simply explaining how to perform.

246
00:12:21.400 --> 00:12:24.400
 These types of scans. So we can say nmap SS. We

247
00:12:24.400 --> 00:12:27.600
 specify the port 445 for SMB and

248
00:12:27.600 --> 00:12:30.300
 then we say script we're looking for

249
00:12:30.300 --> 00:12:34.500
 SMB. The script name is SMB Vaughn and

250
00:12:33.500 --> 00:12:36.200
 again, you can list out all of the

251
00:12:36.200 --> 00:12:39.300
 SMB scripts by listing out the directory of the

252
00:12:39.400 --> 00:12:43.300
 nmap scripts here. So list user,

253
00:12:42.300 --> 00:12:45.900
 share nmap scripts

254
00:12:45.200 --> 00:12:48.700
 and we can then pipe + grip

255
00:12:48.900 --> 00:12:49.800
 grip. This,

256
00:12:50.700 --> 00:12:54.100
 And we're looking for SMB, scripts only so

257
00:12:53.100 --> 00:12:56.300
 we can hit enter and now you can see we have all

258
00:12:56.300 --> 00:12:59.700
 the assembly scripts here. So the one we are targeting is Ms. 0

259
00:12:59.700 --> 00:13:02.300
 8, 0 67. So we can actually just

260
00:13:02.300 --> 00:13:05.200
 copy that directly if you don't want to type it

261
00:13:05.200 --> 00:13:08.200
 in or you don't need to remember them directly. So we just

262
00:13:08.200 --> 00:13:12.900
 specify the script here and then the IP 10.0.0.0 X.

263
00:13:12.900 --> 00:13:15.400
 Now, this is a vulnerability scanning script, which

264
00:13:15.400 --> 00:13:19.000
 is very important. It is going to scan for a particular vulnerability.

265
00:13:19.900 --> 00:13:22.900
 So immediately you can see that it tells us it

266
00:13:22.900 --> 00:13:25.200
 does not give us any options here. So what we

267
00:13:25.200 --> 00:13:28.200
 can do now is we can actually just

268
00:13:28.200 --> 00:13:31.100
 get rid of the, I'll get rid of the

269
00:13:31.100 --> 00:13:34.400
 stealth's. Can we hit enter again? So again, it tells us that

270
00:13:34.900 --> 00:13:37.100
 it is not. It does not give us any results. It

271
00:13:37.100 --> 00:13:41.000
 means that it's not particularly vulnerable to that with

272
00:13:40.200 --> 00:13:43.400
 this particular exploit. So again,

273
00:13:43.400 --> 00:13:46.500
 we can run this against our all our Windows

274
00:13:46.500 --> 00:13:49.000
 machines. That would be working with but I just wanted to

275
00:13:49.000 --> 00:13:49.200
 take

276
00:13:49.300 --> 00:13:52.400
 Take you through the basics of nmap scripts and

277
00:13:52.400 --> 00:13:55.400
 how to run the default script scan. And that's

278
00:13:55.400 --> 00:13:58.400
 pretty much all that. I wanted to cover in this video and I'll be seeing

279
00:13:58.400 --> 00:13:59.500
 you in the next video.