‫In the end, map lectures, we have seen no port scan, also known as ping scan, different ways of
‫scanning ports since scan, also known as half open scanning TCP scan, also known as TCP Connect Scan,
‫UDP, scan service and version detection and operating system detection.
‫Now let's deep dive and then map the map scripting engine, or NSC, is one of the maps most powerful
‫and flexible features, it allows users to write simple scripts to automate a wide variety of networking
‫tasks.
‫Now, those scripts are then executed in parallel with the speed and efficiency you would expect from
‫end.
‫Users can rely on the growing and diverse set of scripts distributed within MAP or write their own to
‫meet customer needs.
‫So I'll show you a couple of things here.
‫Scripts are written in the embedded LUA programming language version five DOT three.
‫And as he is activated with the S uppercase Casey option or script, if you wish to specify a custom
‫set of scripts and results are integrated into unmap normal and XML output, the default place of unmap
‫embedded scripts is user share and map scripts.
‫And as he was designed to be versatile with the following tasks in mind, network discovery, now this
‫is the most powerful part of unmap, right?
‫Examples include looking up who is data based on the target domain, querying ripe for the target IP
‫to determine ownership, S&P queries and listing available SMB shares and services.
‫More sophisticated version detection.
‫The unmap version detection system is able to recognize thousands of different services through its
‫probe and regular expression, signature based matching system, but it cannot recognize everything.
‫For example, identifying the Skype version to service requires two independent probes which version
‫detection isn't flexible enough to handle.
‫And Map could also recognize more S&P services, if it's right, a few hundred different community names
‫by brute force.
‫But neither of these tasks are well suited to traditional and mapped version detection.
‫But both are easily accomplished with NFC.
‫Vulnerability detection.
‫When a new vulnerabilities discovered, you often want to scan your networks, quickly, identify vulnerable
‫systems before the bad guys do, while in MAP isn't a comprehensive vulnerability scanner, NFC is powerful
‫enough to handle even demanding vulnerability checks.
‫Remember when the Heartbleed bug affected hundreds of thousands of systems worldwide and maps developers
‫responded with the SSL Heartbleed detection script within just under two days.
‫Back door detection.
‫Many attackers in some automated worms live back doors to enable later entry.
‫Some of these can be detected by an MABS regular expression based version detection.
‫But more complex worms and back doors require Nessie's advanced capabilities to reliably detect them.
‫Vulnerability, exploitation.
‫As a general scripting language, NSC can even be used to exploit vulnerabilities rather than just find
‫them.
‫But of course, it's not as powerful as exploit frameworks such as Métis Boy.