And Lou everybody when it comes to my advanced ethical hacking networking penetration texting cause
in law.
In this chapter we are going to talk about as an MP What is exactly S&P.
S&P is an Internet standard protocol for collection in organization information about managing devices
on I've been at work and for modifying that info that information to change the device if you like.
That's that's really funny.
But OK so let's go.
So if something like that can be enabled so that it changed the device behavior.
Now it's something that hackers should have a look.
Okay.
So it can be enabled on any of the devices for example on Windows operating system on Linux operating
system and so on and so on.
And then a hacker they can use it to explode information from it target victim matching.
So this is an MP.
Navalny is there to share information to another device but evil intention on people can use it just
to collect some information which they don't have a right to do.
Okay.
So now let's go to the Internet to look for it.
So what is this then.
And the protocol in that well so we can find a lot of information.
Let's go this one first.
We Wikipedia K. So as we said earlier.
So it is exactly EO for collecting and organizing information about managed devices on IP network on
IP network.
Let's see some component of these protocols it is the vision as Peter Beattie's team.
Okay.
So here goes.
So you can have a look and then to see the full definition and the more characteristic of it.
But here in this chapter we are going to show you how we can put it on all operating system.
Here I am on my operating system for now.
Okay let's close it.
So I will use my my windows so that I can show you the demand situation.
OK.
So now let's call
it we can try to go to several manager and disappear managers.
We go exactly to manage and then we would see like
so and then we we try to find it out to figure it out.
And so we are trying to do scrolling down now is all because it's in it's in alphabetical order is of
course in here.
So we find it and then we cricket and then we we added to this matching because many times the Windows
operating system.
They come with it but they don't come with it active so as soon as we installed this system so we can
close the system management now and then just continue to order.
Okay some few configurations are very needed.
After that we are going to show you everything.
Let's wait for a few seconds
let's wait.
Let's call it
Okay so now we can close it.
It finishes so nice.
Okay.
Normal.
Okay let's call we can try to find services inside these services.
So let's put it here.
Okay.
And then really trying to find and piece of risk okay.
Okay.
Now you can go to properties.
Okay.
And then now in the security.
So we had to add some security system.
So
we can put it We don't need for public.
And adding and we can try to find worldwide.
Okay.
Then on much for public this is by rate of course.
So you can change it according to your needs days.
So and then you can add you can edit it and you can remove okay.
So who did these coins look at.
Once again so since we are in a loving environment so we can just accept as an entity into that so that
we can show you how things are working.
So OK so let's close it now.
OK.
Now as an MP services is installed and conferring good on all windows operating system.
So now we can see how hackers can use it to collect information from your victim machine.
Okay
then
yeah.
So when a Windows machine so we can use every known tool which called SNP scan so we can use it just
to get some information to collect some information about a particular devices.
If we don't have this tool installed or downloaded you can you can just google it and you will find
it.
So let's say let's call
so here it has.
Well you can put define the IP address and then get whinge from that IP addresses so you can put it
through to 250 feet of fire.
I mean 254 and then down below so you can put some some other properties for example you click on some
port to scan tweet 9 1 1 9 9 2.
You can check all if you want.
It does matter but it depends on your requirement.
So are you going to do it.
Okay.
So you can leave it as a for that as well.
Yeah
so as you can see it is laid it is not on public so we would just leave it like that just for the sake
of the demonstration.
Okay.
Focusing on your SO WE CAN CHECK multiple names on the list but it isn't recorded now for this course
now let's clean scan this.
No no we can't see yet.
He's trying to find some devices.
So this is exactly my windows several computer so and then each place out another one too.
So we don't know which one so it is.
So yeah.
So let's wait and read.
Okay.
And there you can find some information.
So it's it's so easy for an attacker to grab this information for now to get this information.
It's it's not something which is crucial but after that attacker can use some other powerful tools just
to get the penetration so
okay so now it's great.
Let's go to all.
Let's move on to our candidate next match.
But first of all we went on windows and now we are going to room to use cunnilingus in clearly nukes.
So we have a lot of libraries and a lot of payload a lot of tools that the are of us to make some penetration
or to collect some information from your victim.
For example MIT has brought is a fairly well-known tools for collecting information for attacking for
penetrating.
So it's a straight shot so that we can see.
So to log in
you can use a massive console.
OK.
So mean this ball might explode a high save has a very very very large huge database.
If you don't have it as updated version we will require you to update this version because it's is very
nice tool.
So yeah.
So we play it we take MSF console so that we stopped in Middlesbrough.
We are adding
now we are waiting because it has a very huge payroll is inside
OK.
Good.
Yeah.
So if you see one tell us in forward 467 exploit and five hundred thirty two in payroll so you can try
to find now.
So anything related to as an and then so that we can find some information.
Let's just wait a little bit longer.
What kind of info is we will get.
Okay.
We are waiting so that we can proceed.
Okay.
Good.
Now we see a lot of humans.
So let's try this one isn't in a innovation module it could be linked and then we use we sleep we type
use and then we just need that and then replace center now.
So what are we going to do so he can meet up spot.
So we are going to try to send the upload.
And then after we send the command so we can see a lot of information.
So what.
Before going further so you can type the short options so that you know exactly what what kind of option
you want to set.
For example our host bored tired in time my world.
And so I'm until again
this is the default bond of a N S M B services and this is the point of of any devices.
Okay.
So let's go
okay.
Now as soon as we said earlier we should set the odds and then you hit enter and then.
So now you do December 4 for four for the port number.
Now you just you see after placing option in every comment so you can type sugar options.
Options.
Sure.
Proportions.
And then after a complete one or explode is the notice Jake is reading one in and we have what I heard
was information that we we call it Lost IP hostname one day description of the device contact location
all of them system known.
Before TDA and 252 five
we included two
care nines.
My country is looking so good to see if for our own devices.
They have many interfaces so it to get you there all bits of information and those of Mac IP addresses.
Okay.
So we can after typing or explode so we can see the change or target machine can be supplied.
We just type said right pretty before it said lost and then R H or SD is and then so we type the IP
address of ought to get matching for example here.
If I have your windows so I.
And now I'm on my encouraged UNIX machine so I type I type said a horse and a Windows machine or the
mac book address machine so that we can get information from it.
We have one the exploitation.
And then we would call it was information.
We even have the hostname and then we have the description of the manufacturer and stuff like that you
know.
So it's just a matter of trying
that's calling no one.
Okay.
That's squatting down again to get more information.
So we get a lot of information that a lot of information.
Okay.
Yeah
I know the tool begins to use in currently nukes.
Its name is as an MP who are.
So it's a common I do it so we can use it as well to collect on information.
Use it as an MP.
So let's let's check.
Guys let's just get you down as an MP walk mine or C and a new type the community.
So your community.
I'm in the vicinity of yours.
Can be private or public.
So so would the public and then the IP address of your target matching.
I mean the IP address of your victim matching.
Yeah.
And after we have to type a definition of your s in as an MP.
So here you are.
Not.
Don't tell me not you can type this and then be an inclusion a division and then it was so you will
see your your vision.
So if your vision is to one independent body if you don't know exactly what council is an MP would have.
So so can we.
So we can find it this way.
Okay so let's switch it off and then let's go the okay.
So my vision is one so I put one and then look it to collect it will give a lot of information you know
this is exactly the opposite that we get before.
You see you see and then yeah you see by using this common the hackers would ease board to collect a
lot of information about what did the particular about about that particular devices.
Yeah.
So this way you can try to just change here the IP address of your target and then you can just modify
to find to put out one and just just to try.
But please keep in mind you have to try it on your own devices example if you have a computer.
If you have a computer or a computer so you can try those IP addresses.
This is just my advice to you guys.
And yeah.
So we are so glad to show you these tools and this video we talked about made us proud.
We talk about the windows con as an S&P scan and then we talk about it as an people walk towards common
line tools including.
So that search for this video.
Guys we hope you really enjoyed this video.
We are looking forward for the next video.
Thank you and enjoy my.