All right, folks, I think you are enjoying it.
I hope you are really enjoying the scores.
As of now, we have completed learning and scanner and even open scanners, but DBM scanner.
Finally, we have reached to the end map and map is the most widely adopted.
I don't say it is used by most of the enterprises because enterprises need more often, you know, more
often or tool, which has a, you know, wider looking Dubai, you know, pretty much collaboration
kind of woman does has its own segment, does hazards and map has its own target audience.
And who are those?
It's basically majorly the people who are into the penetration testing people, who manages the, you
know, their customers.
So it's the reason why it is so popular.
It's because it's very, very quick.
It's very seamless.
And it all works on a command line, although it has some newer version with Xenopus.
But it is widely popular because of its quick behavior, because of its fast response just through the
KELLYE now.
Well, first, getting to some, you know, basic understanding, as we have learned for most of our
scanner earlier, when you get some overview about what exactly and MAP is and what are different suits
and whatever, that why it is so different from that.
You know, earlier, you know what, all your scanner we have completed, including NSA scanner and
open mass as well.
So let's get started.
Open mass, just to give you an overview, it's completely free and open, open source.
There's no premium virgin sort of stuff, just like the Nessus and open masses, but it's completely
free and it is even open.
So that means you can have the source code and you can go through it and can understand what is really
going on and what happened when when somebody executed the code next.
It actually does.
The way we have been doing it did remind the host, always services everything.
You know exactly what we have done all year.
But it's very simple.
It's powerful.
It's because there has been attempts to get like thousands or thousands of holes in a second.
So it's that fast and powerful that it can scan thousands of post per second.
So you can even scan the whole Internet just with yours and my scanner, because there is no limit,
because there is no, you know, IP address limit or something.
So you you are authorized to do whatever you want to do.
It just be cautious about, you know, the consequences if you go back into it for sure.
OK, so now finally, it's easy and flexible because all you need to do is just to get the access to
the cloud.
That's all it mean.
All right, let's talk about itude and map and a very brief.
You have the cloud option, but other than the Seelie, what as you get it, is the Zend map.
Then map is basically a Dubai version of a graphical user interface.
Lets get get the give you more better appearance of the results and scanning status as well now.
And Cat and cat is a tool that comes with the end map itself.
It's for better data transfer or redirection at once debugging option altogether.
Just in one two then we have and this is basically to compare these scanners.
And so once you have an output from two different supposed, you can compare the host, you can actually
compare the results and get to know what's what is exactly different and do more of this result than
we have and bring this tool as major league for back generation and analyzing the response as well.
So that's what it is.
It's all free and there and sort of and map all together.
Let's talk about phases.
Why are we talking about fezzes?
Why why we shouldn't really talk about it in the audio scanner because there wasn't any any strict police
approach and map follows us very strict fezzes approach when we execute any scan for any hopes.
All right.
So it first start with the target information and.
Enumeration it basically and mapped into the list of target IP addresses, as we mentioned, in the
target list.
So if you remember, we used to define the list of IP addresses, the target IP address there, maybe
a network, maybe a single IP address or almost done so in the first place.
It determined the list of all IP address that falls under your subnet.
That's the first part of next advice to know perform the host discovery.
In this case, it finds if, let's say you have got 24 and you have got all the range of IP addresses
within the subnet.
OK.
So in that subnet, you know, the idea is to find out how many of the machines, how many of a machine
are currently alive currently online at this moment out of the entire subnet.
OK, so that happened on the discovery.
Next is the reverse DNS resolution.
It's as the name suggests, and basically uses the reverse DNS resolution to get the domain name onto
each and every course.
That gives a very, you know, easy information.
Why it is useful is because even when most of the time, in order to understand what this device is
all about, even the hostname itself give you more information as by this standard, you know, people
put the organization, but their hostname of their firewall is saying F.W. in between.
If so, if you find any device name that ends with the F W zero one zero two, you're pretty sure it's
the firewall.
If you have any device name ending with RDR, that most likely a router.
If you find any device ending with as DeBlois, then it's most likely a switch.
You got point.
So in that way I don't that is really, really beneficial because finding out the hostname or the device
domain name itself gives more and more information for, you know, reconnaissance process or for information
gathering process.
Everything.
Next it comes the board scanning after this and I basically tend to probe this probe can be based on
ICMP Code DCB, Go, DCB, ACH and all those stuff.
It can be on the arc and many other stuff and gather the response coming in from the machine.
OK, so that's what it is.
And the washin detection, once it get to know what other ports the target is currently listening on
and then try to find out the words, it's basically the step and maps and some request and determine
the version based on the response.
So let's say the version of MySQL, version of Apache or whatever the version you're running it.
There are some, you know, straight away version, software version that you can possibly try to collect.
There are some complex software version as well, like Skype for business version as well, some enterprise
interface software version as well, some ghost complex, some needs a complex attention from the unmap.
Some are pretty much standard on it.
Let's keep keep getting updated as well.
So once you get the idea about it, then it comes to the always detection, as the name suggests.
You get to know what is what is the operating system running on the target machine.
And once we get that, then initiated the Cristero to the target machine, if you need it now, see
all the steps, it's by default there.
If you want to skip any of the, you know, step that you want, you don't really need that information.
You need an additional comment.
You need an additional suffix to the command so that you don't discard that step.
OK, but by default, whenever you perform any kind of scanning, it would go for all this stuff.
OK, next, it comes to this script scanning.
So you but unmap map.
The most beautiful part is you can make use of it and mapped scripting engine that is called NFC.
OK, but NFC, you can perform some advance scan.
OK, this will help you to get go in very deep inside and collect more and more information that has
been the security developer has been making.
Many of the developers have been making, you know, multiple tenancy scripts that have that have helped
multiple organization to detect any urgent vulnerabilities or weaknesses into their system.
And that's the reason it's quick enough.
And you don't really have to wait longer for buying any new expensive software or something to do that.
It's pretty quick.
It's all.
Available on a map platform, you can download those NSA and you can run it on your system.
It's going to scan all your system into the network and you'll get to know how many systems are going
to be impacted by this.
You know, one of keys or maybe it's a zero day attack, maybe zero to one as well.
So that will give you more and more information.
And at the end, you get to see your output.
OK, so this is all about how you know, how your scan phases really looks like.
Let's talk about the end map.
Come on.
Line up at the moment, you know all.
Let's start with this.
Putting the command and map.
So the moment you type and map, you get to see all the output.
OK, you just the end map command is more than enough.
You know, the moment you type and map, you are good with all the possible output.
You want to see that?
Let me show you how that works.
Let me go to the machine machine and let me show you how that works.
The beauty is you don't really.
OK, we already have Nessa's working over here.
The beauty is you don't really have to install it.
The reason is it's already built in with the cat, OK?
Because it's the basic software when it comes to the, you know, hacking or penetration testing or
whatever it is scanning for most of the engineers at the moment, you type and map, you get to see
all possible commands.
This even shows that a map is currently running on the machine.
You get to know about the end map version, the first line that gives you the usage of this, you know,
and map and possible way of making use of this commands and all these possible phases.
Maybe Hosta for the command for forced discovery.
First, what are the commands?
Possible commands.
Syntex for scan techniques.
Possible command for port scanning is a service of origin detection as well, script scan, if you remember
I told you about and has seen it and map scripting engine, you can make use of that from here that
always detection in order to detect the always off target machine, you can make use of these possible
option in order to understand or detect if there's any firewall in between.
You can make use of these set of commands.
And so when you have an example, as you know so and MAP has their own servers available and scan me
and my daughter was available to be used as a as a target for us.
All right.
So this is all about an overview of and maps and maps scanner all together.
I hope you like the video will capture some.