WEBVTT

00:01.020 --> 00:02.159
Hey, everyone, welcome back to the

00:02.160 --> 00:03.749
course. So in the last video, all we

00:03.750 --> 00:05.514
did is we started off with our first

00:05.580 --> 00:07.379
and map command, so we went ahead

00:07.380 --> 00:09.600
and logged into our lab environment.

00:09.610 --> 00:10.709
We went ahead and launched our Kelly

00:10.710 --> 00:12.131
Linux machine and watched the

00:12.150 --> 00:13.150
terminal window.

00:13.320 --> 00:14.937
Initially, we type if and we took

00:15.180 --> 00:16.859
a look at the Ethernet interface as

00:16.860 --> 00:18.090
well as the loop back interface.

00:18.300 --> 00:19.679
And we also grabbed the IP address

00:19.680 --> 00:20.680
of our Kelly machine.

00:21.750 --> 00:22.949
In this video, we're just going to

00:22.950 --> 00:24.469
finish our reviewing our output

00:25.350 --> 00:26.819
of the particular came in, we typed

00:26.820 --> 00:28.739
in, so we talked and map and then we

00:28.740 --> 00:30.809
use a dash lorcaserin flag

00:30.810 --> 00:32.099
again, that was to disable port

00:32.100 --> 00:33.389
scanning. So basically, it's just

00:33.390 --> 00:34.770
sending a ping request for us.

00:34.980 --> 00:36.401
And we scanned a range of the

00:36.840 --> 00:38.969
192 to one six eight zero one

00:38.970 --> 00:40.859
all the way to 254 to see what kind

00:40.860 --> 00:41.969
of information we get back.

00:42.000 --> 00:43.259
Now, you see in the background there

00:43.260 --> 00:44.549
that we didn't get a whole lot of

00:44.550 --> 00:45.779
information back on the particular

00:45.780 --> 00:47.399
command. But we have a couple of

00:47.400 --> 00:48.719
questions that we need to answer

00:48.720 --> 00:50.430
now. Now, if you have not

00:50.700 --> 00:52.319
done this particular command yet and

00:52.320 --> 00:53.360
ran it, you'll want to go ahead,

00:53.370 --> 00:54.840
pause this video in either run

00:55.260 --> 00:56.459
the command or go back to the last

00:56.460 --> 00:57.719
video if you skipped over that one

00:57.810 --> 00:58.769
and make sure you go through the

00:58.770 --> 01:00.329
steps in this lab again.

01:00.340 --> 01:01.739
We've designed these labs as a step

01:01.740 --> 01:02.740
by step process.

01:02.790 --> 01:04.680
So that way you can go congruently

01:04.709 --> 01:05.709
through all of them.

01:06.450 --> 01:07.679
All right, so question number four,

01:07.680 --> 01:08.549
here's where we're at.

01:08.550 --> 01:10.019
So we've gone ahead and ran out and

01:10.020 --> 01:11.909
mapped our case and and

01:11.910 --> 01:13.349
then our IP address command there.

01:13.800 --> 01:15.629
So question number four are the host

01:15.630 --> 01:17.296
up and if. Yes, right down the Mac

01:17.340 --> 01:18.340
addresses.

01:20.560 --> 01:22.299
All right, so are the Hosta, so I

01:22.300 --> 01:24.159
see on my end, yes, I see all these

01:24.160 --> 01:26.169
hoster up and I see the Mac

01:26.170 --> 01:27.170
addresses here for

01:28.030 --> 01:29.170
these particular items.

01:30.140 --> 01:31.729
And so I would jot all those down in

01:31.730 --> 01:32.730
my document.

01:34.280 --> 01:35.749
Our question number five is the host

01:35.750 --> 01:36.559
are up, which we've already

01:36.560 --> 01:37.680
established. Yes, they are.

01:38.000 --> 01:39.649
What are the IP addresses of those

01:39.650 --> 01:40.650
hosts?

01:42.290 --> 01:43.759
All right, so again, we see that we

01:43.760 --> 01:45.524
have all of our IP addresses that we

01:45.650 --> 01:47.719
found, so here we've got our

01:48.080 --> 01:49.969
initial one here are calling Linux

01:49.970 --> 01:50.749
machine.

01:50.750 --> 01:52.309
And then we've also got one two one

01:52.310 --> 01:53.339
six eight zero to one

01:54.290 --> 01:56.459
nine two one six eight zero four

01:56.840 --> 01:58.700
five 250,

01:58.940 --> 01:59.940
et cetera.

02:01.420 --> 02:02.659
Let's go back to our lab document.

02:03.790 --> 02:05.019
So now we're going to run a command

02:05.140 --> 02:06.309
that basically disables host

02:06.310 --> 02:08.025
discovery again in the downloadable

02:08.440 --> 02:09.909
resources. I have a listing of and

02:09.910 --> 02:11.379
map commands as well as the

02:11.980 --> 02:12.789
specific commands.

02:12.790 --> 02:14.319
I want you to practice as kind of

02:14.320 --> 02:15.669
part of the assessment portion of

02:15.670 --> 02:16.670
this course.

02:17.410 --> 02:18.279
So all we're going to do at our

02:18.280 --> 02:19.809
terminal window here is we're just

02:19.810 --> 02:20.979
going to type in this command here,

02:20.980 --> 02:22.205
the end map dash capital,

02:22.870 --> 02:24.789
P lowercase, and then

02:24.790 --> 02:26.319
again, the same range of IP

02:26.320 --> 02:27.320
addresses.

02:27.340 --> 02:28.509
Now I'm going to go ahead and type

02:28.510 --> 02:30.069
clear in my terminal window just so

02:30.070 --> 02:31.589
I can clear it up and make it a

02:31.660 --> 02:33.139
little prettier. You don't have to

02:33.140 --> 02:34.449
do this step, but if you want to

02:34.450 --> 02:36.009
follow along and do it, just type in

02:36.010 --> 02:37.359
the word clear and then just press

02:37.360 --> 02:38.999
enter. You notice that it clears

02:39.010 --> 02:40.239
everything. It starts is back at

02:40.240 --> 02:42.009
essentially the beginning when

02:42.010 --> 02:43.010
everything looked fine.

02:44.230 --> 02:45.429
All right, so as I mentioned, we're

02:45.430 --> 02:46.629
going to go ahead and type in this

02:46.630 --> 02:48.219
command here and map dash

02:48.490 --> 02:49.764
capital P, lowercase N and

02:50.320 --> 02:51.599
then our IP address range.

02:51.610 --> 02:52.720
So let's go ahead and do that now

02:53.380 --> 02:54.639
and map all lowercase

02:55.540 --> 02:57.759
space, dash capital P, lowercase

02:57.760 --> 02:58.760
N, we'll put a space

02:59.800 --> 03:01.199
and then our IP address range.

03:01.210 --> 03:02.533
So again as one two one six

03:03.310 --> 03:04.990
eight done zero one

03:05.200 --> 03:06.789
forward slash twenty four

03:07.390 --> 03:08.739
and we'll go ahead hit enter on a

03:08.740 --> 03:10.050
keyboard and run that as well.

03:10.780 --> 03:11.829
And I'm going to go ahead pause

03:11.830 --> 03:13.269
video here and just take a moment or

03:13.270 --> 03:14.619
so to run this and we'll pick things

03:14.620 --> 03:16.149
back up once we have the results.

03:17.750 --> 03:19.189
All right, so we have our results

03:19.190 --> 03:20.719
now. We went ahead and ran our scan

03:20.720 --> 03:22.288
to disable host discovery, so we

03:22.580 --> 03:23.749
have some results on the screen

03:23.750 --> 03:24.799
here. So let's take a look at our

03:24.800 --> 03:26.749
lab. We just have one quick question

03:26.750 --> 03:28.465
here. What response do you actually

03:28.550 --> 03:29.550
see?

03:30.810 --> 03:32.789
Ah, so what I see is I see that it's

03:32.910 --> 03:34.233
provided by some ports that

03:34.740 --> 03:35.939
are open. It shows me that there's

03:35.940 --> 03:37.379
some closed ports there that I don't

03:37.380 --> 03:38.849
necessarily care about too much,

03:39.270 --> 03:40.409
at least for the purposes of our

03:40.410 --> 03:41.939
lab. But I do see that there are

03:41.940 --> 03:43.009
some open ports here.

03:43.200 --> 03:44.579
So I know that. OK, well, they are

03:44.580 --> 03:45.569
running S.H.

03:45.570 --> 03:46.860
or they at least have that open

03:47.280 --> 03:48.449
perhaps. You know, there's some way

03:48.450 --> 03:49.879
I can attack through that, you know,

03:49.890 --> 03:51.029
and again, thinking back to the

03:51.030 --> 03:52.889
criminal hacker mentality of

03:52.890 --> 03:54.599
why, you know, why we're actually

03:54.600 --> 03:55.479
scanning stuff. Right.

03:55.480 --> 03:57.389
We're trying to find potential

03:57.660 --> 03:59.549
ways into these systems.

04:01.210 --> 04:02.229
All right, so let's go back to our

04:02.230 --> 04:03.230
lab document here.

04:04.120 --> 04:05.559
So now we're going to do our last

04:05.560 --> 04:06.579
step of this particular lab.

04:06.580 --> 04:07.580
We're just going to run a quick

04:08.130 --> 04:09.130
command.

04:09.520 --> 04:10.719
And with this command, we're

04:10.720 --> 04:12.819
basically just doing a ping ping

04:12.820 --> 04:14.710
scan. So that's what this dash

04:14.740 --> 04:16.749
one switch will do for us with each

04:16.750 --> 04:17.750
ping three.

04:17.920 --> 04:18.969
Now, if you're studying for something

04:18.970 --> 04:20.139
like this certified ethical hacker

04:20.140 --> 04:21.699
exam for council,

04:22.060 --> 04:23.530
you just want to know commands

04:24.160 --> 04:25.659
like and mapping each ping three and

04:25.660 --> 04:26.619
kind of understand the different

04:26.620 --> 04:27.698
flags in use if you're

04:28.480 --> 04:29.739
studying for, like, compter

04:29.740 --> 04:31.689
contests. Plus that you'll also want

04:31.690 --> 04:33.454
to be able to look at like an output

04:33.550 --> 04:34.809
like this, for example, and

04:34.810 --> 04:36.430
understand what command was run

04:36.670 --> 04:38.440
to get to this particular output.

04:39.800 --> 04:40.909
So just keep that in mind, some

04:40.910 --> 04:42.169
differences in those particular

04:42.170 --> 04:43.849
exams and we'll keep moving forward

04:43.850 --> 04:44.850
with our lab so we

04:45.740 --> 04:47.149
are still allowed to do our Calli

04:47.150 --> 04:48.469
machine. We haven't changed at all.

04:48.470 --> 04:49.940
If you have closed it for some

04:50.000 --> 04:51.666
reason, definitely log back in and

04:51.980 --> 04:53.299
get going with a terminal window and

04:53.300 --> 04:54.300
you'll be caught up.

04:54.740 --> 04:56.029
I'm going to go ahead clear again

04:56.030 --> 04:57.319
just to clear the screen.

04:57.470 --> 04:59.185
And then is president turning on my

04:59.420 --> 05:00.889
keyboard and you'll see it'll clear

05:00.890 --> 05:02.109
the screen for us. So we'll go ahead

05:02.110 --> 05:03.160
and run our last command here.

05:03.170 --> 05:05.360
So again, we have our paying three

05:05.690 --> 05:07.549
space dash, one space

05:07.550 --> 05:08.870
and then our IP address here.

05:11.270 --> 05:13.129
I subscribe to that and so aping

05:13.130 --> 05:14.130
three.

05:15.400 --> 05:17.019
Space, that's one

05:17.650 --> 05:19.267
space and then our IP address, so

05:19.480 --> 05:21.100
the one hundred two to one six eight

05:21.790 --> 05:22.810
zero dot one.

05:24.140 --> 05:25.429
And if you need to pause a video to

05:25.430 --> 05:26.989
type that in, feel free to use this

05:26.990 --> 05:27.990
one right here.

05:28.460 --> 05:30.224
All right. So let's go ahead and run

05:30.380 --> 05:31.399
this command by just pressing

05:31.410 --> 05:32.410
internal keyboard.

05:33.050 --> 05:34.309
And again, this one might take a

05:34.310 --> 05:35.719
moment or so to go ahead and finish

05:35.720 --> 05:36.919
out. It's usually pretty quick.

05:36.920 --> 05:38.269
So I'll kind of hang tight here and

05:38.270 --> 05:39.985
we'll see if it'll crank it out for

05:40.220 --> 05:41.220
us quickly.

05:41.600 --> 05:43.021
And then once it completes, I

05:43.460 --> 05:45.489
just want you to note

05:45.500 --> 05:47.059
if you see any type of response at

05:47.060 --> 05:48.060
all.

05:49.190 --> 05:50.905
So may go for a just another moment

05:50.990 --> 05:52.279
or so here, I'm going to go ahead

05:52.280 --> 05:54.044
and pause the video and we'll take a

05:54.110 --> 05:55.459
look at once it's finished out.

05:57.200 --> 05:59.179
All right, so we just ran our big

05:59.180 --> 06:00.769
three command and it was taken just

06:00.770 --> 06:01.769
a moment. So am I.

06:01.770 --> 06:03.170
And so I just actually utilize

06:03.650 --> 06:04.924
control C to cancel it and

06:05.480 --> 06:06.480
stop the scan.

06:06.710 --> 06:07.579
And you're welcome to do that on

06:07.580 --> 06:09.295
your end as well as if you're still

06:09.380 --> 06:10.279
going.

06:10.280 --> 06:11.848
But so the main question here on

06:12.140 --> 06:13.999
this one is, do we see any response

06:14.000 --> 06:14.959
at all?

06:14.960 --> 06:15.919
And the answer is yes.

06:15.920 --> 06:17.209
Right. We do see that we get some

06:17.210 --> 06:18.919
kind of response from the particular

06:18.920 --> 06:20.569
IP address. We also see our time to

06:20.570 --> 06:22.130
live, et cetera, et cetera.

06:22.160 --> 06:23.539
So with this one, we were just

06:23.540 --> 06:24.949
trying to see if we get any response

06:24.950 --> 06:26.689
at all. Again, this lab was just

06:26.690 --> 06:27.910
checking for life systems.

06:28.130 --> 06:29.810
So for our purposes,

06:29.990 --> 06:31.609
we were able to see that, yes, all

06:31.610 --> 06:32.990
the systems that we were touching

06:33.320 --> 06:34.692
were alive and we saw the IP

06:34.790 --> 06:36.409
addresses were getting response from

06:36.410 --> 06:37.410
were live systems.

06:37.880 --> 06:39.410
And so potentially moving through

06:39.590 --> 06:41.059
the additional scanning and then

06:41.060 --> 06:42.740
eventually enumeration aspects,

06:43.040 --> 06:44.149
we could potentially find

06:44.150 --> 06:45.589
vulnerabilities on those systems and

06:45.590 --> 06:47.449
exploit those to gain access and

06:47.450 --> 06:48.649
then from there move laterally

06:48.650 --> 06:50.414
through the network or steal data or

06:50.630 --> 06:52.339
whatever our final objective might

06:52.340 --> 06:53.340
be.

06:53.990 --> 06:55.190
So this video, which is covered,

06:55.430 --> 06:57.109
live system, you know, checking for

06:57.110 --> 06:59.329
life systems in the next lab,

06:59.330 --> 07:00.389
we're going to talk about and

07:00.390 --> 07:02.000
basically do some more and map and

07:02.180 --> 07:03.829
ping three commands, specifically

07:03.830 --> 07:05.269
checking for open ports.