WEBVTT

00:01.060 --> 00:02.109
Everyone, welcome back to the

00:02.110 --> 00:03.369
course. So in the last video, we

00:03.370 --> 00:05.079
just ran a quick acknowledgment scan

00:05.080 --> 00:05.889
with ping three.

00:05.890 --> 00:06.969
Again, we were just looking at the

00:06.970 --> 00:08.320
percentage of packet loss

00:08.920 --> 00:10.300
in this video. We're going to run a

00:10.420 --> 00:11.420
Christmas scan.

00:11.500 --> 00:13.449
So, again, we have to run

00:13.450 --> 00:14.439
this against Kelly Linux.

00:14.440 --> 00:15.339
We're actually going to run it here

00:15.340 --> 00:16.340
in the terminal.

00:16.390 --> 00:17.409
We'll run the command.

00:17.410 --> 00:18.489
And then we have a couple of

00:18.490 --> 00:19.869
questions in the long run, one

00:19.870 --> 00:20.870
additional command.

00:21.130 --> 00:22.299
And then in the next video is

00:22.300 --> 00:23.649
actually the last component of this

00:23.650 --> 00:25.389
particular lab where we'll just

00:25.510 --> 00:27.249
do some more Windows firewall

00:27.520 --> 00:29.049
changes and then we'll run another

00:29.050 --> 00:30.050
scan against that.

00:30.310 --> 00:31.359
So let's go ahead and get started

00:31.360 --> 00:32.859
here. So we've got a terminal window

00:32.860 --> 00:34.119
here. I'm just going to go ahead and

00:34.120 --> 00:35.529
type in clear like I normally do,

00:35.530 --> 00:36.909
just to clear things up and hit

00:36.940 --> 00:38.557
enter just to make it where we're

00:38.560 --> 00:39.560
starting fresh.

00:40.870 --> 00:41.949
And then we're going to type in this

00:41.950 --> 00:43.299
command here. So it's pretty long.

00:43.300 --> 00:44.649
It will go step by step through it.

00:44.950 --> 00:46.719
So we're going to type in three

00:46.870 --> 00:48.849
space dash lowercase C

00:49.240 --> 00:50.740
space, the number one

00:51.070 --> 00:52.070
space dash capital V

00:52.990 --> 00:55.119
as in Victor space dash

00:55.120 --> 00:57.249
lowercase P space 80

00:57.670 --> 00:58.990
to specify port 80.

00:59.200 --> 01:00.939
Space dash lowercase s

01:01.210 --> 01:02.210
space 555.

01:02.560 --> 01:04.509
To specify that we want to the

01:04.510 --> 01:06.010
initiating port is going to be

01:06.490 --> 01:07.509
the port sending packets.

01:07.510 --> 01:09.309
It's going to be port number five

01:09.310 --> 01:10.630
thousand five hundred fifty five.

01:11.290 --> 01:12.579
We're going to put another space and

01:12.580 --> 01:13.854
then a dash dash capital M

01:14.560 --> 01:15.736
excuse me to set the TCP

01:16.660 --> 01:18.190
sequence number or put a space in

01:18.430 --> 01:19.430
the number zero.

01:19.660 --> 01:21.179
We'll put another space, a dash

01:21.340 --> 01:23.199
capital you p f

01:23.560 --> 01:25.469
to set the urgent push and finish

01:25.480 --> 01:26.999
legs and that will put a space.

01:27.340 --> 01:28.779
And then finally our IP address

01:28.780 --> 01:29.889
again, the same IP address we've

01:29.890 --> 01:31.180
been using for most of the SLAPP

01:31.960 --> 01:33.009
or so as I mentioned, we're going to

01:33.010 --> 01:34.539
do this step by step so everyone can

01:34.540 --> 01:35.709
type in the correct command here.

01:35.890 --> 01:37.329
So we'll start off this by typing in

01:37.790 --> 01:39.239
three space dash

01:39.650 --> 01:41.680
excuse me, space dash lowercase C.

01:43.570 --> 01:45.640
So it's paying three space,

01:45.650 --> 01:46.728
that's case Casey will

01:47.560 --> 01:48.770
put another space there.

01:49.210 --> 01:50.876
Now we're going to type in the one

01:51.400 --> 01:52.821
and then a space dash capital

01:53.290 --> 01:54.290
V.

01:54.910 --> 01:56.499
So we'll put a one space dash

01:56.500 --> 01:57.500
capital V.

01:58.030 --> 01:59.079
We're going to put another space

01:59.080 --> 02:00.309
here and we're going to put dash

02:00.310 --> 02:02.070
lowercase P to specify

02:02.270 --> 02:03.549
number eighty. And then we'll put a

02:03.550 --> 02:04.719
space in the will, actually put the

02:04.720 --> 02:05.849
eighty four point eighty.

02:07.120 --> 02:08.699
Next we're going to put a space,

02:08.740 --> 02:10.869
we're going to put a dash lowercase

02:10.870 --> 02:12.460
s. So if you remember,

02:12.790 --> 02:14.199
we want to specify that we're

02:14.200 --> 02:15.964
sending it from number five thousand

02:16.030 --> 02:17.099
five hundred fifty five

02:18.160 --> 02:19.629
and we're just going to put a space

02:19.630 --> 02:21.394
in our actual number that we want to

02:21.490 --> 02:22.780
use the 555.

02:23.680 --> 02:24.810
We'll put another space,

02:25.900 --> 02:27.399
then we're going to add in the dash

02:27.400 --> 02:28.478
capital M and space in

02:29.380 --> 02:31.180
the number zero so

02:31.210 --> 02:33.189
that we'll put another space

02:34.090 --> 02:35.529
and then we're going to put in Dash

02:35.530 --> 02:36.530
UPF.

02:36.580 --> 02:38.259
And then finally our IP address,

02:38.260 --> 02:39.399
we're going to put all that into one

02:39.400 --> 02:40.329
shot.

02:40.330 --> 02:42.069
So dash pf

02:43.390 --> 02:44.909
space one hundred two point one

02:45.280 --> 02:47.099
six eight zero one.

02:48.070 --> 02:49.209
And again, you can just double check

02:49.210 --> 02:50.349
yourself if you want to make sure

02:50.350 --> 02:51.369
that you're running that correctly.

02:51.370 --> 02:52.539
But you should get an error message

02:52.540 --> 02:53.469
if you're not.

02:53.470 --> 02:54.879
And we'll go ahead and run this

02:54.880 --> 02:56.049
command by pressing internal

02:56.050 --> 02:57.459
keyboard here. You'll see it comes

02:57.460 --> 02:58.460
back pretty quickly.

02:58.890 --> 03:00.400
We have a few questions here.

03:01.150 --> 03:02.349
So question number one, how many

03:02.350 --> 03:03.699
packets does it show it sent

03:03.740 --> 03:04.740
successfully?

03:04.780 --> 03:05.889
And then how many packets were

03:05.890 --> 03:07.029
received successfully?

03:07.220 --> 03:08.259
So questions one and two.

03:08.260 --> 03:09.260
They're.

03:10.480 --> 03:11.579
All right, so at least on my end,

03:11.580 --> 03:12.609
and you should actually have the
exact

03:12.610 --> 03:14.319
same results we see that one package

03:14.320 --> 03:15.699
was transmitted and one package was

03:15.700 --> 03:17.169
received. So we were basically a

03:17.170 --> 03:18.489
hundred percent successful on that

03:18.490 --> 03:19.490
one.

03:20.780 --> 03:21.900
So going back to our lab document

03:21.930 --> 03:23.189
here, we have one more command we're

03:23.190 --> 03:25.199
going to run and we're basically

03:25.200 --> 03:26.550
running a city scan again.

03:26.560 --> 03:27.883
So again, the TCP three way

03:28.050 --> 03:28.889
handshake.

03:28.890 --> 03:30.119
We're talking about that first

03:30.120 --> 03:31.379
portion where I say, hey, I want to

03:31.380 --> 03:32.752
talk to you and then nothing

03:33.360 --> 03:34.319
else happens. Right? I just keep

03:34.320 --> 03:35.399
continuously saying, hey, I want to

03:35.400 --> 03:36.570
talk to you. So kind of like the

03:36.580 --> 03:37.899
creepy guy at the club or something

03:37.900 --> 03:39.080
that's like, hey, hey, hey.

03:39.570 --> 03:40.649
Kind of like that. But we're not

03:40.650 --> 03:41.489
going to be creepy on this.

03:41.490 --> 03:42.299
We're just going to run a command.

03:42.300 --> 03:43.868
So let's go ahead here and we're

03:44.100 --> 03:44.879
going to run this command.

03:44.880 --> 03:46.559
And then we want to find out, is 80

03:46.560 --> 03:48.509
showing us open when we run this

03:48.510 --> 03:49.520
particular command?

03:49.710 --> 03:50.639
So let's go and do that now.

03:50.640 --> 03:51.899
So we're going to type in ping

03:51.900 --> 03:52.900
three.

03:53.610 --> 03:54.610
We'll put a face,

03:55.920 --> 03:57.539
we're going to put a Dash eight and

03:57.540 --> 03:59.039
then a space and the number eighty.

04:00.570 --> 04:02.187
Four Dash eight space, the number

04:02.190 --> 04:03.190
80.

04:04.250 --> 04:05.689
We'll put another space there and

04:05.690 --> 04:06.739
then we're going to put a dash

04:06.740 --> 04:08.719
capital V and then a space

04:08.720 --> 04:10.249
and the dash capital S.

04:11.210 --> 04:12.379
So Dash Capital V.

04:12.380 --> 04:13.869
Space Dash Capital S..

04:14.360 --> 04:16.099
And then finally, we're going to end

04:16.100 --> 04:17.509
with our same IP address, the same

04:17.510 --> 04:19.470
one we've been using that 192 dot

04:19.490 --> 04:20.970
one six eight zero one.

04:21.320 --> 04:22.880
So one of the two one six eight

04:23.420 --> 04:24.199
zero one.

04:24.200 --> 04:25.309
And then just press enter our new

04:25.310 --> 04:26.779
keyboard and that'll go ahead and

04:26.780 --> 04:27.800
run the command for us.

04:29.050 --> 04:30.519
So, again, what we want to find out

04:30.520 --> 04:32.669
is port aid is showing as open.

04:34.000 --> 04:35.019
So let's take a look here.

04:37.390 --> 04:39.309
So are we getting a response

04:39.310 --> 04:40.269
that's kind of kind of the main

04:40.270 --> 04:41.259
question there, right. And that'll

04:41.260 --> 04:42.999
help you decide if the ports

04:43.000 --> 04:44.319
actually open. So if we get a

04:44.320 --> 04:45.820
response, then the answer would be

04:45.970 --> 04:47.409
yes. Right. But if we don't get a

04:47.410 --> 04:48.519
response, then the answer will be

04:48.520 --> 04:49.329
no.

04:49.330 --> 04:50.555
So we see here that, yes,

04:51.220 --> 04:52.984
we did get a response from Port A-T.

04:53.230 --> 04:54.699
So the answer to the question would

04:54.700 --> 04:56.170
be, yes, we did.

04:56.180 --> 04:57.339
You know, yes, it is showing us

04:57.340 --> 04:58.719
open. Yes, we did get a response

04:58.720 --> 05:00.190
from it. So we're good to go

05:01.420 --> 05:02.679
in this lab. We just ran a couple of

05:02.680 --> 05:04.360
quick commands with paying three.

05:04.450 --> 05:05.920
Again, we ran our

05:06.430 --> 05:08.589
Sint Can just a moment ago.

05:08.590 --> 05:09.969
And then we also went ahead and ran

05:09.970 --> 05:10.970
our Christmas scan.

05:11.080 --> 05:12.459
Now, in the next video we're going

05:12.460 --> 05:13.989
to do is do some more.

05:13.990 --> 05:14.990
As I mentioned, Windows

05:16.120 --> 05:17.120
firewall.

05:17.140 --> 05:18.609
We're going to do some modifications

05:18.610 --> 05:20.200
or essentially just turn it on again

05:20.320 --> 05:21.639
and run some scans against it and

05:21.640 --> 05:22.869
take a look at what that output

05:22.870 --> 05:23.379
looks like.