1
00:00:00,150 --> 00:00:03,630
OK, so another Web application scanner is called McDo.

2
00:00:03,900 --> 00:00:09,100
So this one actually scans Web servers for known vulnerabilities that you could potentially exploit.

3
00:00:09,820 --> 00:00:12,110
I, I personally find Nitto very useful.

4
00:00:12,120 --> 00:00:18,900
I use it on all penetration tests that I do, and you can really find very, very, very valuable vulnerabilities

5
00:00:19,470 --> 00:00:21,450
for you to test on and try to take advantage of.

6
00:00:21,630 --> 00:00:23,880
So and it's very, very easy to use.

7
00:00:23,910 --> 00:00:27,780
So let's go over to NATO and see how it works.

8
00:00:27,810 --> 00:00:35,820
OK, so we're back in Colonics Machine, so all you really have to do is type in NICTA so and OK, go

9
00:00:36,000 --> 00:00:42,390
and then put a dash host and then you're going to put HTP calling for us as far as large.

10
00:00:42,390 --> 00:00:48,060
192000 one six eight five six one zero four.

11
00:00:48,060 --> 00:00:52,890
Will you size Divi A just to keep it isolated there.

12
00:00:53,340 --> 00:00:55,600
And let's go ahead and try it out.

13
00:00:55,620 --> 00:01:02,070
So you're going to want to enter and it's going to start to look for, you know, any and all information

14
00:01:02,070 --> 00:01:02,760
that they can get.

15
00:01:03,300 --> 00:01:07,470
And they're going to start to find different vulnerabilities, as you can see, is listing a lot of

16
00:01:07,470 --> 00:01:15,960
things out, like right here as PSP, you know, reveals sensitive, sensitive information, found some

17
00:01:15,960 --> 00:01:18,890
different directories that we might be able to browse to.

18
00:01:19,470 --> 00:01:24,480
So it's going through and looking looking for a lot of different vulnerabilities.

19
00:01:24,490 --> 00:01:28,650
So just give it let's just give it a second and let's see, you know what?

20
00:01:28,650 --> 00:01:29,350
All the different.

21
00:01:29,540 --> 00:01:31,860
OK, so finished up.

22
00:01:31,860 --> 00:01:38,910
So some just found a couple more interesting things, like, for example, it found the login page.

23
00:01:38,910 --> 00:01:41,800
So right here it says, hey, admin login page is found.

24
00:01:42,060 --> 00:01:46,200
So that's something that you definitely want to find out in the real world.

25
00:01:46,200 --> 00:01:50,100
If you can find an admin login page, you might be able to take advantage of it.

26
00:01:50,220 --> 00:01:52,050
You might be able to brute force into it.

27
00:01:52,100 --> 00:01:52,800
Who knows?

28
00:01:53,190 --> 00:01:57,270
So it's definitely something that you want to be able to figure out.

29
00:01:57,750 --> 00:02:03,090
So this one right here says that, you know, you may be able to do command execution, you know, based

30
00:02:03,090 --> 00:02:06,410
on what is found, has to do with some stuff.

31
00:02:06,600 --> 00:02:08,250
So the C.

32
00:02:08,640 --> 00:02:12,030
S fuel injection might also be an issue.

33
00:02:12,750 --> 00:02:17,340
So you can check out the changelog right here and get more information on, you know, what's going

34
00:02:17,340 --> 00:02:17,720
on here.

35
00:02:17,910 --> 00:02:19,710
So very, very useful tool.

36
00:02:19,860 --> 00:02:24,440
And you'll find that it finds different vulnerabilities that you might be able to throw like into searchingly

37
00:02:25,380 --> 00:02:26,550
or into exploit.

38
00:02:26,550 --> 00:02:31,470
DB look for it or you can just fire at this point and be able to take advantage of it.

39
00:02:31,500 --> 00:02:35,550
So Nick, though, is definitely a very useful tool and I would definitely recommend that you guys use

40
00:02:35,550 --> 00:02:35,610
it.

41
00:02:35,790 --> 00:02:42,960
OK, so another tool to scan Web application websites is called Ask you a map and ask you on edge.

42
00:02:43,020 --> 00:02:44,280
These are two different tools.

43
00:02:45,060 --> 00:02:50,820
So a majority of Web applications are going to utilize some type of escudo database, you know, in

44
00:02:50,820 --> 00:02:51,650
some type of way.

45
00:02:51,870 --> 00:02:57,810
And regardless of the language, you know, we can enumerate information about them and determine if

46
00:02:58,170 --> 00:03:00,570
all attacks are possible with you.

47
00:03:00,570 --> 00:03:02,160
A map and ask a ninja.

48
00:03:03,790 --> 00:03:09,520
So just like Bourbon's, you know, these two tools perform similar functions, and you this comes down

49
00:03:09,520 --> 00:03:15,580
to personal preference, I'm personally going to use escudo map and that's what I'm going to show you.

50
00:03:15,590 --> 00:03:19,480
And I can show you what's going on in here, because a little bit a little bit funkier, it's going

51
00:03:19,480 --> 00:03:20,140
to get going.

52
00:03:20,680 --> 00:03:25,170
So we're going to ask you a map and we're going to use that in our Web applications.

53
00:03:25,420 --> 00:03:26,800
So we're going to wait so that it up.