In this lecture we start our hands on practicing with in map so I will open terminal window and then
I will try to use
side scan to the exploit.
Will PM
so here we see the services that was enabled on the VM and also see that we put the MAC address and
from the MAC address.
We knew that it is an oracle virtual box VM.
It is now try virtual scan.
That will give us more information about the enabled services
so here we see the difference of each service that's associated with it and open bought.
So for example the movie or web server he's running Apache let us now try to identify the operating
system using the capital option
so he will see that the operating system is in X he does try to find the host for the router.
So we see that the rotor is this character that runs this iris and you see that the only running surface
on the rotor is the clitoris.
So these are like you to a sprite will VM that has many services running.
Let us now try to run he's saying cancel T5 for specific parts.
So for example the TV and TV spots so we see that the pitch TV part of protocol is running and the HD
is not enabled on the VM and we see that the scan was completed in about 30 seconds.
It does use the same scan but this time with the sneaky timing so T1 to evade intrusion detection systems
so we see that the scan was completed in about 58 seconds.
So it is more slower than the previous one.
So that is why it is used to evade Trojan detection systems because it runs slowly and also I will use
another evasion technique so I will try to use the coy option so I will spoof these
IP addresses
and I will go to the doctor and enable debugging using the common debug IP packet detail to see
this move package.
Now I would give the command so I in your daughter will see that it's coming from the spoofed eye whether
it is.
So you two hundred and fifty and the
two hundred let us now try to use scripts.
So we use the script.
That is the fourth one that will give us more detailed information.
So here we see this information like the BIOS name the war group.
And many other information it does use another script.
So
which TV site map.
Generator.
Script that will give us details about the site map.
So here we see the that effective structure of the website
so we have seen that scripts give us detailed information.
Let us now try to work with z map which is UI for and map.
So you will see that we can select the type of this can and by selecting the type you see that the syntax
of the command is changed
and here you can specify the host.
So let us try an intense scan without being to the meta spiteful VM.
So here we see the results of the intense scan which is uses the computer option that is like running
the default script.
And here you see the services that were discovered on the machine.
So in this picture we have explored how to work with and map and have seen many options that can be
used with it.
And then we have seen how to work with Zainab map which is he going to look for and map.