WEBVTT 00:00.950 --> 00:01.939 Hey, everyone, welcome to the 00:01.940 --> 00:03.116 scanning enumeration and 00:03.200 --> 00:04.549 Vulnerability's Course, my name is 00:04.550 --> 00:05.479 Ken Underhill and I'll be your 00:05.480 --> 00:06.480 instructor. 00:06.650 --> 00:07.579 So what are we actually going to be 00:07.580 --> 00:08.479 doing in this course? 00:08.480 --> 00:09.799 Well, you're going to be performing 00:09.800 --> 00:10.819 a lot of different scans and 00:10.820 --> 00:12.420 primarily we're using and map and 00:12.550 --> 00:13.550 mapping three. 00:13.760 --> 00:15.049 We're also going to be using those 00:15.050 --> 00:16.549 to determine the operating system in 00:16.550 --> 00:18.019 use on a target, as well as 00:18.020 --> 00:19.309 determining open ports and 00:19.310 --> 00:20.749 performing vulnerability scans a 00:20.750 --> 00:22.399 little later on in this course. 00:23.600 --> 00:24.699 So what are prerequisites? 00:24.710 --> 00:26.089 While this course is intended for 00:26.090 --> 00:27.949 individuals that are studied 00:27.950 --> 00:29.120 for things like these sort of 00:29.210 --> 00:30.529 ethical hacker or penthouse plus 00:30.530 --> 00:32.569 exam from companya, also 00:32.570 --> 00:34.129 individuals that are looking to just 00:34.130 --> 00:35.209 learn more about this particular 00:35.210 --> 00:37.020 topic, whether they be for a 00:37.040 --> 00:38.449 penetration testing, which is kind 00:38.450 --> 00:40.369 of the focus of the course, or just 00:40.370 --> 00:42.134 as a kind of a blue team or defender 00:42.200 --> 00:43.159 and just learning more about 00:43.160 --> 00:45.079 scanning enumeration and how we 00:45.080 --> 00:46.310 can find vulnerabilities. 00:46.940 --> 00:48.439 So prerequisites, you definitely 00:48.440 --> 00:49.249 need to have some kind of 00:49.250 --> 00:50.377 understanding of Linux. 00:50.390 --> 00:52.640 So specifically the Linux terminal 00:53.210 --> 00:54.729 and more specifically the Calli 00:54.830 --> 00:56.299 Linux terminal, because that's what 00:56.300 --> 00:57.109 we're going to be using in this 00:57.110 --> 00:58.110 course. 00:58.130 --> 00:59.899 We also want you to have a basic 00:59.900 --> 01:00.769 understanding of computer 01:00.770 --> 01:01.819 networking. So that way, when we're 01:01.820 --> 01:02.869 talking about things like IP 01:02.870 --> 01:04.999 addresses or lookback 01:05.000 --> 01:06.379 interfaces, you kind of have an 01:06.380 --> 01:07.669 understanding of what that is 01:08.210 --> 01:09.679 also. So you have an understanding 01:09.680 --> 01:11.500 of the TCP three way handshake. 01:11.510 --> 01:13.129 And so as I start talking about that 01:13.370 --> 01:14.389 throughout the course, you're not 01:14.390 --> 01:16.154 totally confused and your eyes don't 01:16.370 --> 01:17.209 start glazing over. 01:17.210 --> 01:18.349 So you definitely want to have some 01:18.350 --> 01:20.270 foundational networking knowledge. 01:20.690 --> 01:21.889 And you could get both of those 01:21.890 --> 01:23.359 items on the Siberry site. 01:23.370 --> 01:25.134 You can get information about Linux, 01:25.220 --> 01:26.539 as well as basic networking 01:26.540 --> 01:27.830 knowledge and various courses. 01:28.400 --> 01:29.509 You also want to have an understanding 01:29.510 --> 01:30.379 of operating systems. 01:30.380 --> 01:32.060 So we'll be looking at 01:32.450 --> 01:33.626 Windows OS, specifically 01:34.310 --> 01:35.569 Server and Windows 10. 01:36.110 --> 01:37.609 And when I say looking at, I really 01:37.610 --> 01:38.599 just mean that we're going to be 01:38.600 --> 01:39.559 using those. 01:39.560 --> 01:40.879 And then also, as I mentioned, our 01:40.880 --> 01:41.930 Kelly Linux machine. 01:42.950 --> 01:44.089 You just want to be familiar with 01:44.090 --> 01:45.319 hardware, we're not going to, like, 01:45.320 --> 01:46.609 dove into hardware or anything like 01:46.610 --> 01:47.569 that, but it's just good to have 01:47.570 --> 01:48.590 that foundational knowledge. 01:48.740 --> 01:49.789 She understand, like what we're 01:49.790 --> 01:51.109 actually doing as we go through the 01:51.110 --> 01:51.979 process. 01:51.980 --> 01:53.659 And as I mentioned before, if you're 01:53.660 --> 01:55.069 studying for the U.S. 01:55.070 --> 01:56.785 council certified ethical hacker or 01:56.900 --> 01:58.459 the Company Apprentice plus or any 01:58.460 --> 02:00.319 other type of penetration testing 02:00.320 --> 02:02.030 or quote unquote ethical hacking 02:02.240 --> 02:04.099 related certification, then this 02:04.100 --> 02:05.599 is a good course for you to take to 02:05.840 --> 02:07.189 hone your skills just a little bit 02:07.190 --> 02:08.190 more. 02:08.840 --> 02:10.530 So who am I, you know, who 02:10.699 --> 02:11.699 is this guy teaching you? 02:12.050 --> 02:12.979 Well, my name is Senator Hill. 02:12.980 --> 02:14.149 As I mentioned, I'm the master 02:14.150 --> 02:15.150 instructor SIBERRY. 02:15.200 --> 02:16.639 I'm also an adjunct professor of 02:16.640 --> 02:17.479 digital forensics. 02:17.480 --> 02:19.079 Remember that, by the way, Hinton, 02:19.080 --> 02:20.746 to wink wink, I hold a master's in 02:20.900 --> 02:22.009 Cybersecurity and Information 02:22.010 --> 02:22.849 Assurance, as well as an 02:22.850 --> 02:24.349 undergraduate degree in 02:24.350 --> 02:25.519 cybersecurity management and 02:25.520 --> 02:26.629 information systems. 02:27.260 --> 02:29.024 As I kind of mentioned before, I'm a 02:29.090 --> 02:30.430 certified ethical hacker as well as 02:30.440 --> 02:31.459 a computer hacking forensic 02:31.460 --> 02:32.460 investigator. 02:32.540 --> 02:33.810 Both those exams are from Easy 02:33.830 --> 02:34.609 Council. 02:34.610 --> 02:35.884 And then I'm also studying 02:36.500 --> 02:37.879 for my company, Apprentice Plus 02:37.880 --> 02:39.439 right now. So if you have questions 02:39.440 --> 02:41.449 on any of the above exams, 02:41.450 --> 02:42.799 then I'm probably a good resource to 02:42.800 --> 02:44.180 answer any questions you might have. 02:44.780 --> 02:46.397 I'm also an exam reviewer as well 02:46.610 --> 02:48.590 as an exam writer for SC Counsel, so 02:48.710 --> 02:50.278 I've reviewed the latest version 02:50.690 --> 02:52.459 of the S.H. 02:52.460 --> 02:53.449 exam for them. 02:53.450 --> 02:54.679 So I won't tell you what modules and 02:54.680 --> 02:55.669 I definitely can't tell you the 02:55.670 --> 02:56.539 answers. 02:56.540 --> 02:58.669 And then I've also written questions 02:58.670 --> 02:59.959 for the computer hacking forensic 02:59.960 --> 03:01.629 investigator investigator exam. 03:01.640 --> 03:03.355 So the latest version that's out, I 03:03.440 --> 03:04.579 actually wrote some questions for 03:04.580 --> 03:05.449 them. 03:05.450 --> 03:06.529 And again, I can't tell you the 03:06.530 --> 03:07.839 answers to that one either. 03:09.320 --> 03:10.520 So what are we covering this course, 03:10.670 --> 03:11.449 you know, I mentioned this about 03:11.450 --> 03:12.979 scanning renumeration and 03:13.580 --> 03:14.629 vulnerabilities, but what are we 03:14.630 --> 03:15.559 actually covering? What we're going 03:15.560 --> 03:17.629 to show you how to basically 03:17.670 --> 03:19.287 run some commands, essentially to 03:19.340 --> 03:20.419 look at life systems 03:21.410 --> 03:23.300 and check for open ports as well. 03:23.600 --> 03:25.099 We're going to check, you know, run 03:25.100 --> 03:26.815 a lot of different scanning options 03:27.020 --> 03:28.370 with a map. And it's being three 03:29.420 --> 03:30.229 about different some of the 03:30.230 --> 03:31.749 different flags we can use, for 03:31.970 --> 03:33.949 example, like a scan in 03:33.950 --> 03:35.779 that map doing the dash lowercase s 03:35.780 --> 03:37.159 capital s, and that'll make more 03:37.160 --> 03:38.389 sense as we go through the course 03:39.110 --> 03:40.369 much before we're going to cover 03:40.370 --> 03:41.509 some fingerprinting and better 03:41.510 --> 03:42.689 grabbing. Again, those are kind of 03:42.980 --> 03:43.999 numeration related things. 03:44.000 --> 03:45.666 So not fingerprinting an aspect of 03:45.800 --> 03:46.939 this kind of footprinting type of 03:46.940 --> 03:48.499 stuff, but fingerprinting from like 03:48.500 --> 03:49.819 an OS standpoint of figuring out 03:49.820 --> 03:51.388 what operating system the target 03:51.470 --> 03:52.470 might be using. 03:53.150 --> 03:54.619 Module five, why should work with 03:54.620 --> 03:56.180 some different renumeration tools, 03:56.600 --> 03:58.460 things like Digg and Finger, 03:59.180 --> 04:00.589 and no, it's not the middle finger, 04:00.590 --> 04:01.549 it's actually a command. 04:01.550 --> 04:03.009 So you'll learn about what that is. 04:03.410 --> 04:04.978 Module six, we're going to cover 04:05.060 --> 04:07.189 vulnerability. So from that context, 04:07.190 --> 04:08.659 all these are actually lab based 04:08.660 --> 04:10.375 modules. So modules two, three, six 04:10.490 --> 04:11.539 are all lab based. 04:12.000 --> 04:12.949 And so we're going to have a lot of 04:12.950 --> 04:13.849 hands on there. So with the 04:13.850 --> 04:15.369 vulnerability section, we'll go 04:15.650 --> 04:16.639 ahead and run a couple of 04:16.640 --> 04:17.989 vulnerability scans with different 04:17.990 --> 04:19.338 tools so you can take a look and see 04:19.339 --> 04:20.339 what that looks like. 04:20.959 --> 04:22.380 Module seven, I talk about an 04:22.430 --> 04:23.998 assessment in there and then we, 04:24.350 --> 04:25.609 of course, do our wrap up with our 04:25.610 --> 04:26.610 conclusion video. 04:26.900 --> 04:27.859 But again, I talk about an 04:27.860 --> 04:28.879 assessment in there and I'll talk 04:28.880 --> 04:30.049 about that as we go throughout the 04:30.050 --> 04:30.979 entire course. 04:30.980 --> 04:32.119 So we have a couple of assessments 04:32.120 --> 04:33.200 for you in this course. 04:33.350 --> 04:34.673 No one will be a assessment 04:35.630 --> 04:36.630 on vulnerabilities. 04:36.650 --> 04:38.218 So that one I will show I have a 04:38.300 --> 04:39.589 video that shows you where to go. 04:39.590 --> 04:41.449 Look for that in the Siberry lab 04:41.450 --> 04:42.379 environment. 04:42.380 --> 04:43.879 And then I also have a document 04:43.880 --> 04:45.259 that's got a bunch of different Emek 04:45.560 --> 04:47.180 and map commands excuse me on it. 04:47.510 --> 04:49.069 And that way you can download that 04:49.070 --> 04:50.299 and you could practice's on your 04:50.300 --> 04:51.589 own. Now I 04:52.130 --> 04:53.600 design this course so the labs 04:54.110 --> 04:55.384 are all with the cyber lab 04:55.610 --> 04:57.559 environment. However, I 04:57.560 --> 04:58.729 designed the course to where you 04:58.730 --> 05:00.019 could actually do all the labs on 05:00.020 --> 05:01.100 your own virtual environment. 05:01.110 --> 05:02.209 So if you're not a paid member for 05:02.210 --> 05:03.876 some reason, you know, by the way, 05:04.010 --> 05:05.010 you should consider that. 05:05.030 --> 05:06.108 But anyways, if you're 05:06.920 --> 05:08.537 not a paid member, this is a good 05:08.600 --> 05:10.009 way, a good course for you to take, 05:10.010 --> 05:11.299 because you can actually do things 05:11.300 --> 05:12.680 just in your own virtual machine 05:12.830 --> 05:14.569 with Kelly Linux and of course, 05:14.570 --> 05:15.949 keeping in mind that the IP 05:15.950 --> 05:17.239 addresses will be different because 05:17.240 --> 05:18.439 you're doing whatever on your own 05:18.440 --> 05:20.029 network and not inside of the 05:20.030 --> 05:21.199 Siberry lab environment. 05:22.670 --> 05:23.970 So how is this core structure, 05:23.990 --> 05:25.039 what's actually going to be on 05:25.040 --> 05:26.412 demand videos and with those 05:26.930 --> 05:28.699 we've got labs now with the labs, 05:28.860 --> 05:30.109 I've got a bunch of step by step 05:30.110 --> 05:31.399 guide to walk you through all the 05:31.400 --> 05:32.959 labs. So if you want to pause the 05:32.960 --> 05:34.577 videos and not watch me do it and 05:34.910 --> 05:36.949 just practice it on your own, if 05:36.950 --> 05:38.600 you find I go too fast or too slow, 05:38.750 --> 05:39.679 then that's why I've created this 05:39.680 --> 05:41.029 step by step guide so that we can 05:41.030 --> 05:42.030 just go through it on your own. 05:42.140 --> 05:43.249 And you don't have to worry about 05:43.250 --> 05:44.959 following along in the video. 05:46.280 --> 05:47.540 As I mentioned, we got assessment. 05:47.580 --> 05:48.679 So, again, that's going to be the 05:48.680 --> 05:50.329 vulnerability assessment that's 05:50.330 --> 05:52.000 available inside of the Siberry 05:52.190 --> 05:53.190 paid model. 05:53.300 --> 05:54.799 And then also, as I mentioned, the 05:54.800 --> 05:56.540 downloadable and map 05:56.900 --> 05:58.615 listing of commands that I want you 05:58.640 --> 06:00.439 to go run in practice and understand 06:00.590 --> 06:01.670 what you're doing with those 06:02.030 --> 06:03.439 specifically. And maps going to be 06:03.440 --> 06:04.879 very important if you decide to take 06:04.880 --> 06:07.009 anything like the Easy Council CCH 06:07.010 --> 06:08.088 exam or the TIA Pentax 06:08.990 --> 06:10.879 plus exam, especially, especially 06:11.090 --> 06:12.469 for Pentax. Plus, you definitely 06:12.470 --> 06:14.329 need to understand the output 06:14.330 --> 06:15.439 of components. You need to be able 06:15.440 --> 06:16.789 to look at an output of and map 06:16.790 --> 06:18.289 command and then understand like 06:18.290 --> 06:19.999 what command was actually run to get 06:20.000 --> 06:21.000 to that output. 06:21.590 --> 06:22.429 And then, as I mentioned, 06:22.430 --> 06:23.329 supplemental resources. 06:23.330 --> 06:25.459 So in addition to all the lab 06:25.460 --> 06:26.989 documents, the assessment stuff, 06:27.140 --> 06:28.039 that's going to be additional 06:28.040 --> 06:29.209 helpful information that you can 06:29.210 --> 06:30.430 download with this course. 06:32.030 --> 06:33.409 So a quick post assessment question, 06:33.410 --> 06:34.639 and I hope you were paying attention 06:34.640 --> 06:36.459 to my hint, hint, wink, wink thing. 06:36.980 --> 06:38.329 So question here. I have worked as 06:38.330 --> 06:39.809 an adjunct professor and instructed 06:39.830 --> 06:41.089 on art history. 06:41.270 --> 06:42.379 Is that true or false? 06:44.530 --> 06:45.729 All right, so that's obviously 06:45.730 --> 06:46.659 false, right? If you were paying 06:46.660 --> 06:48.326 attention, you heard me say that I 06:48.490 --> 06:50.107 was an Asian professor of digital 06:50.410 --> 06:51.999 forensics or computer forensics, if 06:52.000 --> 06:53.409 you're not familiar with what that 06:53.410 --> 06:54.219 is. 06:54.220 --> 06:55.689 And most people have learned about 06:55.690 --> 06:56.979 forensics from watching television 06:56.980 --> 06:57.819 shows, et cetera. 06:57.820 --> 06:59.049 So just think of it as you're 06:59.050 --> 07:00.399 looking through a computer and doing 07:00.400 --> 07:01.509 the same things they do on those 07:01.510 --> 07:02.510 crime shows. 07:03.130 --> 07:04.449 Or so this video just went over a 07:04.450 --> 07:05.829 brief introduction in the next 07:05.830 --> 07:06.759 video. We're just going to jump 07:06.760 --> 07:07.839 right into module two.