-: Now that we're in phase two, scanning and enumeration 2 2
we've gotta find a hole in the network in order to break in. 3 3
Since this is an introductory course, we're gonna use ZenMap 4 4
which is a graphical user interface 5 5
for the world's most popular scanning tool Nmap. 6 6
Zenmap is truly powerful because it uses Nmap 7 7
as its workhorse to do all the scanning, 8 8
but provides us with the easy to use graphical interface 9 9
that makes setting up our scans simple, 10 10
and consolidates all of our text based output from Nmap 11 11
into a nice, concise format for us to read. 12 12
Another great feature of Zenmap is the ability 13 13
to customize the scan parameters, 14 14
it provides us the command line syntax 15 15
that would be required by Nmap to perform the scan 16 16
but then allows us to add or change those parameters 17 17
to make it a more refined scan. 18 18
The final benefit of Zenmap is that it also creates 19 19
a database of the past scans. 20 20
Which can be saved for future reference. 21 21
This is a wonderful feature 22 22
to aid in your documentation of the network, 23 23
and allows us to go back to those details 24 24
in the future if we need em. 25 25
So what kind of information do we need to get started? 26 26
And what kind of information 27 27
are we going to find during our scanning? 28 28
Well to get started, we're gonna need either an IP address, 29 29
or a range of IPs, we should have that information though 30 30
from our reconnaissance phase. 31 31
Using that information we're gonna perform different scans 32 32
to determine different levels of information. 33 33
Our most basic scan are simply pings, 34 34
to determine if the machines are up 35 35
and responding on the network. 36 36
This certainly falls into our scanning category 37 37
in our scanning and enumeration phase. 38 38
Next, we're gonna begin scanning for open ports 39 39
then we'll finally move into more in-depth scans 40 40
where we can use that information received to perform 41 41
a basic enumeration of the host to determine 42 42
the Operating System, the version of the software, and more. 43 43
So lets get started tryin to find those holes. 44 44
Now before we begin scanning our network, 45 45
we need to set up our network 46 46
to make sure they're all still on an isolated net. 47 47
To do this we're gonna open up Virtual Box. 48 48
From Virtual Box we're gonna go to preferences, 49 49
and then we're gonna click on network. 50 50
Then we're gonna click on host only network, 51 51
to create a network just for our virtual machines to use. 52 52
We're going to click on the adapter to add, 53 53
with the plus sign. 54 54
And you'll see you now have Virtual Box net zero. 55 55
We're gonna click on the screw driver icon 56 56
which is gonna allow us to configure it, 57 57
and it has by default 192.168.56.1 that's fine, 58 58
we can use that but we do want to set up a DHCP server. 59 59
So we'll click on that, and say enable server. 60 60
We're gonna use 192.168.56.1 as our server. 61 61
Our mask will be a standard class C 225.255.255.0. 62 62
Our lower bound we'll hand out IPs starting at 100, 63 63
so 192.168.56.100 and our upper bound we'll use as 50. 64 64
192.168.56.150 this will give us 50 IPS 65 65
that can be handed out to our virtual machines. 66 66
Since we only have three, that will be plenty for us. 67 67
We'll hit okay, and then hit okay again. 68 68
Now we need to set up each machine in network to use them. 69 69
So we'll click on Kali, and then click network 70 70
go to network, and select from internal network, 71 71
to Host-only Adapter, and again we use the same one 72 72
we used before vboxnet0. Hit okay. 73 73
We'll go to windows, we'll do the same thing, 74 74
click on network, go to host only adapter, 75 75
vboxnet0 and hit okay. 76 76
And then metaspolitable click on network, 77 77
and go to host-only adapter, vboxnet0. 78 78
At this point we're gonna start 79 79
launching our virtual machines, 80 80
to do that we'll simply left click on the name Kali 81 81
and then start, we're gonna go back while that's booting up 82 82
and start up my windows, and I'm going to go back again 83 83
and start up metasploitable. 84 84
So now we can cycle through those machines, 85 85
and see where they are in the boot process. 86 86
Once they boot up they're gonna be able to 87 87
pick up their own IP address using that DHCP. 88 88
So we'll click on Kali, and then we're gonna cycle over 89 89
to our metasploitable machine, and then we're gonna 90 90
cycle over to our windows machine. 91 91
Now, just to verify that they've actually picked up 92 92
the IP address, lets go head and do an IPconfig on windows. 93 93
Open up the command prompt, and do Ipconfig. 94 94
And you can see that it got the first IP address, 95 95
192.168.56.100, at this point we can cycle over to 96 96
our metasplotable machine. 97 97
We're gonna log in again with, msfadmin, 98 98
msfadmin for the password 99 99
and we can do ifconfig since this is linux. 100 100
And you can verify here, 192.168.56.101, 101 101
now in the real world, 102 102
your machines are already gonna be online. 103 103
This is just because of our simulation 104 104
that we have access to them. 105 105
We just want to know what we're looking at. 106 106
We're gonna go back to our Kali machine, 107 107
and this is where we're gonna do all of our work 108 108
for the rest of this lesson.