WEBVTT

00:00.870 --> 00:02.129
Hey, everyone, welcome back to the

00:02.130 --> 00:03.599
course. So in the last video, all we

00:03.600 --> 00:05.219
did is we went ahead and logged into

00:05.220 --> 00:05.999
our lab environment.

00:06.000 --> 00:07.349
We booted up all of our virtual

00:07.350 --> 00:09.029
machines, and then we just enabled

00:09.030 --> 00:10.769
Apache Web services by going to our

00:10.950 --> 00:12.670
lab, say zero one server.

00:13.530 --> 00:14.549
So in this video, we're just going

00:14.550 --> 00:16.859
to cover our first and maps scan.

00:17.040 --> 00:18.608
So we're going to cover our half

00:18.660 --> 00:20.149
connect scan or basically the same

00:20.160 --> 00:21.899
scan is what we're doing here.

00:22.620 --> 00:24.188
So first step here were to click

00:24.450 --> 00:25.629
on the Windows 10 machine, which is

00:25.630 --> 00:27.198
the very bottom on this lab when

00:27.390 --> 00:28.679
tend to go ahead and click on that.

00:29.340 --> 00:30.509
It's going to take a moment or so to

00:30.510 --> 00:32.489
actually bring up the desktop

00:32.490 --> 00:33.490
screen for us here.

00:33.720 --> 00:34.889
And then once it does, we're going

00:34.890 --> 00:36.539
to be launching our we're going to

00:36.540 --> 00:38.069
be accessing our Kelly desktop

00:38.070 --> 00:39.299
through the Vincey viewer

00:39.990 --> 00:40.990
application.

00:41.760 --> 00:43.439
So once it boots up our desktop

00:43.440 --> 00:44.459
here, we're just going to double
click

00:44.460 --> 00:45.659
where it says fancy viewers.

00:45.690 --> 00:47.159
So this orange color, it kind of

00:47.160 --> 00:47.939
looks like a Tiggers.

00:47.940 --> 00:48.869
I will go ahead.

00:48.870 --> 00:49.870
Double click on that there.

00:50.110 --> 00:51.809
Make it a command window here,

00:51.810 --> 00:52.769
popping up in the background.

00:52.770 --> 00:54.040
Just kind of pause for a second and

00:54.090 --> 00:55.090
it should go away.

00:55.800 --> 00:57.179
And so now we'll double click on our

00:57.180 --> 00:58.530
Vincey viewer icon there.

00:59.220 --> 01:00.839
By default, it should put in our IP

01:00.840 --> 01:02.460
address of our call machine for us.

01:02.610 --> 01:03.839
If for some reason it doesn't.

01:03.840 --> 01:05.098
I've got it listed in the step by

01:05.099 --> 01:06.140
step guide for you.

01:06.390 --> 01:07.559
And again, these lab guides are

01:07.560 --> 01:08.879
available in the supplemental

01:08.880 --> 01:09.779
resources section.

01:09.780 --> 01:11.099
You can download all of the guides

01:11.100 --> 01:12.569
we're using in the course, as well

01:12.570 --> 01:13.589
as the information about the

01:13.590 --> 01:15.089
assessments that you'll want to

01:15.090 --> 01:16.364
complete in order to fully

01:16.920 --> 01:18.279
be able to say that, hey, I am

01:18.300 --> 01:20.189
trained in scanning the numeration

01:20.190 --> 01:21.190
and vulnerability's now.

01:22.360 --> 01:23.439
All right, so once we see the IP

01:23.440 --> 01:24.519
address in there, which, again, it

01:24.520 --> 01:25.869
should default for us, we're just

01:25.870 --> 01:26.979
going to click on the Connect button

01:26.980 --> 01:28.110
and then put in our password.

01:28.120 --> 01:29.260
So click on Connect there.

01:29.560 --> 01:30.849
And then our password is going to be

01:31.060 --> 01:31.869
the word password.

01:31.870 --> 01:33.550
So it'll be a capital P

01:34.060 --> 01:35.060
lowercase HSW

01:36.310 --> 01:37.279
and then it's going to be the number

01:37.280 --> 01:38.897
zero, not the not a capital load,

01:39.250 --> 01:40.720
but the number zero and then a

01:41.050 --> 01:42.879
lowercase R d and

01:42.880 --> 01:43.869
then once you type that in you can

01:43.870 --> 01:45.009
either hit enter in a keyboard or

01:45.010 --> 01:46.659
just click the OK button there and

01:46.660 --> 01:47.449
it's going to last.

01:47.450 --> 01:49.329
Kelly Linux desktop for us.

01:49.810 --> 01:50.979
You'll see a little error message

01:50.980 --> 01:52.209
here. We don't worry about that for

01:52.210 --> 01:53.409
this particular lab.

01:53.410 --> 01:54.609
So you can either click on OK or

01:54.610 --> 01:55.610
just X out of this.

01:56.330 --> 01:57.729
What was click on OK there.

01:58.060 --> 01:59.949
And then the next step of our lab

01:59.950 --> 02:00.999
is going to be double clicking the

02:01.000 --> 02:02.470
root terminal icon right here.

02:02.650 --> 02:03.519
And what that's going to do is

02:03.520 --> 02:04.870
launch a terminal window for us.

02:05.140 --> 02:06.969
Now, again, if you're using your own

02:06.970 --> 02:08.587
virtual machines, you'll be using

02:08.919 --> 02:10.059
a different IP address and you'll

02:10.060 --> 02:11.650
also just want to launch a regular

02:12.040 --> 02:13.149
terminal window. You don't have to

02:13.150 --> 02:14.449
click on anything that says route

02:14.500 --> 02:15.500
terminal.

02:16.170 --> 02:17.049
All right. So let's go back to our

02:17.050 --> 02:17.859
lab document here.

02:17.860 --> 02:19.029
So we've done a lot of steps there.

02:19.150 --> 02:20.019
We're actually down a step.

02:20.020 --> 02:21.789
Number seven, we just double click

02:21.790 --> 02:23.113
the terminal icon to launch

02:23.710 --> 02:24.910
our terminal window for us.

02:26.560 --> 02:28.128
So now what we're going to do is

02:28.240 --> 02:29.610
we're going to run our first unmap

02:29.620 --> 02:31.629
command here, so as I mentioned,

02:31.630 --> 02:32.949
we're going to do a second scan or

02:32.950 --> 02:34.567
it's sometimes called a half open

02:35.020 --> 02:36.789
scan or half connect scan.

02:37.350 --> 02:38.680
And what we're going to do is it's

02:38.770 --> 02:40.479
we're not going to specify a range

02:40.480 --> 02:41.480
of ports.

02:41.560 --> 02:42.960
So what that's going to do and map

02:43.270 --> 02:45.034
does in that situation as it scans a

02:45.070 --> 02:46.749
thousand of the most common

02:47.140 --> 02:48.909
ports on the particular target.

02:49.330 --> 02:50.349
So it's going to take a little bit

02:50.350 --> 02:51.430
of time to run the scan.

02:51.440 --> 02:52.329
So I'm going to go ahead and run the

02:52.330 --> 02:53.619
command and then I'll pause the

02:53.620 --> 02:55.209
video and then we'll use a magic of

02:55.210 --> 02:56.739
fast forwarding to actually take a

02:56.740 --> 02:58.509
look at our output, go

02:58.600 --> 02:59.819
and type in our command here.

03:00.640 --> 03:01.809
So we're going to type in and map

03:01.810 --> 03:02.810
all lowercase.

03:02.840 --> 03:04.509
We'll put a space and then a dash

03:04.510 --> 03:06.029
and a lowercase s and a capital

03:06.400 --> 03:07.269
S.

03:07.270 --> 03:08.859
So there we're just with a capital

03:08.860 --> 03:10.209
S. We're specifying we want to run a

03:10.210 --> 03:11.876
sound scan and then we're going to

03:11.950 --> 03:13.518
put a space on our IP address if

03:13.570 --> 03:14.697
it's 192, about one six

03:15.490 --> 03:17.110
eight zero one

03:17.620 --> 03:18.699
and then just press and turn your

03:18.700 --> 03:20.109
keyboard. As I mentioned, it might

03:20.110 --> 03:21.809
take a moment or so to run the scan.

03:21.820 --> 03:22.659
So I'm going to go ahead, pause

03:22.660 --> 03:23.859
video. We'll pick things back up

03:23.860 --> 03:24.860
once it's complete.

03:26.070 --> 03:27.687
All right, so you see the scan is

03:27.750 --> 03:29.099
completed on my side of things, so

03:29.100 --> 03:30.389
let's take a look at our
questionnaire

03:30.390 --> 03:31.390
we had for our lab.

03:31.470 --> 03:33.059
Question number one, do you get any

03:33.060 --> 03:34.677
results? So after we ran this map

03:34.860 --> 03:35.987
since can do we get any

03:36.690 --> 03:38.189
results back? Well, you see, on my

03:38.190 --> 03:39.190
end, I do.

03:39.360 --> 03:40.590
We see that I've got all sorts of

03:40.860 --> 03:42.281
numbers there as well as it's

03:42.330 --> 03:43.649
showing me that, hey, these are open

03:43.650 --> 03:45.419
ports and these are the services

03:45.420 --> 03:47.184
that are running on those particular

03:47.430 --> 03:48.430
ports.

03:49.040 --> 03:50.119
So in this video, we just read a

03:50.120 --> 03:51.589
quick and map scan in the next

03:51.590 --> 03:52.729
video, we're just going to continue

03:52.730 --> 03:54.049
on with running some more and more

03:54.050 --> 03:55.189
scans and then eventually we're

03:55.190 --> 03:56.659
going to get into our three

03:56.810 --> 03:57.439
commands.