The default and MAP scan only displays state of the ports whether they are open or not.
In this lecture, we will extract more information about the target network, such as services that
are running on the network.
Their versions and operating system of the target network or host discovering software version of a
service is important because once attackers discover the exact version a number of the service, then
attackers can check all the possible vulnerabilities in that particular version.
And if there are vulnerabilities available, then they can be exploited very easily.
Right?
So type and map hyphen as we now specify the IP address or a domain name.
S means service, which means version.
This scan is going to take a longer time than the usual scans, so wait patiently.
So hit enter scan is complete.
Now let's dissect the information one by one.
As you can see, guys, here we have an additional column version, right?
It displays the current version of the installed application or service port number 22, which runs
SSH service by default.
And the current version of SSH is open SSL 6.6.
Right.
Now what does this version number mean to a hacker?
Once the exact version number is found, then we can easily search databases like exploit ADB and C
we for possible vulnerabilities in the version.
And if vulnerabilities are there, then we can use a framework like Metasploit to exploit the vulnerabilities
for a network and system administrators.
It is important to check the version of installed services or applications.
If version is vulnerable to attacks, then we must apply patch or update the application.
Then we have another open port eight zero.
The current version of Apache Web server is 2.4.7.
Down here we have another interesting piece of information service info right operating system of the
host is Linux server is being powered by the Linux.
So guys, it is important for network and system administrators to keep an eye on the services and their
versions so regularly check the current version of the installed application or service and also check
whether it is vulnerable to attacks or not.