In this lecture I will give a brief introduction about in map and how to work with it.
So in map easy free and open source scanner that can be used to discover or map the hosts on surfaces
only computer network to build a map of that network
to map in at work and map since specially crafted brackets to the target host and then analyzes the
responses these responses deduce information about the target including Operating Systems and Software
variance.
Since targets can respond differently depending on their type for example or fingerprinting can be done
by looking at the TCB window size and time to leave in the eye be hit out of the first bracket in a
TCB session.
Some Microsoft Windows operating systems have detail value and deceive you into size of one hundred
and twenty eight and eight thousand one hundred ninety two respectively while just court orders have
Ttl value of two hundred and fifty five and TCB when the size of four thousand one hundred and twenty
eight Linux operating systems have Ttl value of 64 at most of them have TCB window size of five thousand
eight hundred and forty.
And examples of scan types that we can use within map are these we scan using the S as option the agent
scan using the as the option operating system scan using the option target port scan using the P option
and we can use evasion techniques to evade firewalls and intrusion detection systems so we can adjust
timing which controls the balance between the performance and accuracy and there are six timing templates
that can be used to zero or paranoid which is very slow and used for ideas evasion T1 or sneaky which
is quite slow and used also for ideas evasion D2 or polite which slows down to consume less bandwidth
it runs 10 times slower than default T3 or normal which is the default it uses dynamic timing model
based on target responsiveness to 4 or aggressive which assumes a fast and reliable network and may
overwhelm Target's to 5 or insane which is very aggressive and will likely overwhelm targets or miss
open bots and we have you call using EDI option which makes it appear to the remote host that the hosts
you specify as decoys are scanning the target network too so it hides the real attacking IP among other
spoofed once using too many decoys may slow your scan and can make it less accurate.
In addition some ice piece might filter out your spoofed packets but many might not do that at all also
there is fragmentation using the F option to evade intrusion detection systems and bucket filters by
splitting up the TCB head out over several buckets to make it harder for them to detect what you are
doing Idol or zombie scan.
Using the as I option which takes advantage of an ideal system by employing it to scan our target it
monitors the I.V. ideas of the responses and itemize the board status from that I scan is considered
to be the ultimate stealth scan that trick some using the that some option which sends packets with
invalid TCB UDP or a CTV check some to find back its filters and intrusion detection systems if the
target responded.
Then it is likely one of those are likely the case is with hosts that will drop those packets
and we have an E or n map scripting engine which is one of N maps most powerful and flexible features.
It allows users to write and share simple scripts to automate a wide variety of networking tasks with
speed and efficiency it extends in maps functionality in five different ways.
Network discovery more sophisticated version detection vulnerability detection backdoor detection and
vulnerability exploitation
when working with scripts you can execute group of scripts using categories boolean expressions or wildcards
and we have hundreds of scripts included within map.
And here are a few examples at CTV site map generator.
My squirrel Dan patches at CTV is fuel injection and broadcast e.g. Javi discovery so this lecture I
have given you a brief introduction about in map and how to work with it and in the next lecture you
will see that in practice.