WEBVTT

00:00.890 --> 00:02.089
Hey, everyone, welcome back to the

00:02.090 --> 00:03.319
course. So in the last video, we

00:03.320 --> 00:04.594
just ran a Christmas scan.

00:04.610 --> 00:06.129
Again, a Christmas scan is only

00:06.320 --> 00:07.820
going to work on a Linux machine.

00:07.830 --> 00:09.470
So if you see that on any type of

00:09.710 --> 00:11.209
certification exam, you'll know the

00:11.210 --> 00:12.210
answer now.

00:12.860 --> 00:13.849
So in this video, we're just going

00:13.850 --> 00:15.169
to do another inmate command, so

00:15.170 --> 00:16.249
we're actually going to close our

00:16.250 --> 00:17.809
Zend map tool and we'll go back to

00:17.810 --> 00:18.810
our command prompt.

00:19.820 --> 00:20.959
So the way we can close this out,

00:20.960 --> 00:22.309
just out of it at the top.

00:22.310 --> 00:23.660
Right. It's going to say to you,

00:23.690 --> 00:24.889
hey, you have say changes.

00:24.890 --> 00:26.089
We don't care what you want to close

00:26.090 --> 00:27.090
it anyway.

00:27.140 --> 00:28.369
And then we're going to go back to

00:28.370 --> 00:29.370
our fancy viewer and

00:30.230 --> 00:31.219
just maximize that again.

00:31.220 --> 00:32.329
So just click on the little Tiggers.

00:32.330 --> 00:33.829
I might take a moment or so since

00:33.830 --> 00:35.479
it's been a minute since we've used

00:35.480 --> 00:36.979
it, but then it'll take us back to

00:36.980 --> 00:38.000
our command prompt here.

00:40.020 --> 00:40.889
All right, so let's go back to our

00:40.890 --> 00:41.890
lab document here.

00:42.360 --> 00:43.469
So now we're just going to run an

00:43.470 --> 00:44.249
acknowledgment scan.

00:44.250 --> 00:45.149
So again, that's why you need to

00:45.150 --> 00:46.522
understand the TCP three way

00:46.590 --> 00:48.600
handshake for this entire course,

00:48.810 --> 00:50.219
to understand that we send a signal

00:50.220 --> 00:51.659
back, we get an acknowledgment and

00:51.660 --> 00:53.429
send it back, and then we end out

00:53.430 --> 00:55.309
with an acknowledgment to establish

00:55.310 --> 00:56.309
her three way handshake.

00:56.310 --> 00:57.419
Of course, there's more things
involved

00:57.420 --> 00:58.770
in there, but that's kind of the
generalized

00:58.920 --> 00:59.950
high level overview.

01:01.380 --> 01:03.046
All right. So we do have our Kelly

01:03.270 --> 01:04.079
Root terminal open.

01:04.080 --> 01:05.189
So we're actually ahead of the game

01:05.190 --> 01:06.869
here. We're going to do is step four

01:06.870 --> 01:08.009
here where we're going to type in

01:08.010 --> 01:09.660
this particular command at the prom.

01:10.530 --> 01:11.939
Now, what we want to do here and

01:11.940 --> 01:13.349
what we're specifying is part number

01:13.350 --> 01:15.299
80. So we want to find out, is port

01:15.300 --> 01:16.909
80 filtered or unfiltered?

01:16.920 --> 01:18.089
So that's kind of our goal with this

01:18.090 --> 01:19.090
particular lab.

01:19.700 --> 01:20.959
So let's do that now we're to type

01:20.960 --> 01:22.528
in and map space, dash lowercase

01:23.230 --> 01:25.129
s capital, a space

01:25.130 --> 01:26.959
dash lowercase P to

01:26.960 --> 01:28.528
specify the port number and then

01:28.790 --> 01:30.358
space 80 to specify that we want

01:30.560 --> 01:31.369
port 80.

01:31.370 --> 01:32.779
And then we'll finally end up with a

01:32.780 --> 01:34.159
space and then our IP address that

01:34.160 --> 01:35.119
we want to scan against.

01:35.120 --> 01:36.379
Again, that if you recall from

01:36.380 --> 01:38.239
earlier, that's our server

01:38.240 --> 01:39.240
IP address.

01:40.310 --> 01:41.479
So let's go and type that in now.

01:41.480 --> 01:42.559
So we'll type in and map

01:43.640 --> 01:44.640
space.

01:45.020 --> 01:47.090
Dash lowercase s capital a

01:47.750 --> 01:50.030
space dash lowercase P

01:50.540 --> 01:51.863
space eighty and then again

01:52.580 --> 01:53.860
a space in our IP address.

01:53.870 --> 01:55.799
So 192 dot one six eight

01:55.970 --> 01:56.970
zero one.

01:58.020 --> 01:58.819
All right. And I always like to

01:58.820 --> 02:00.049
double check myself. I know I typed

02:00.050 --> 02:01.249
that correctly, but always just make

02:01.250 --> 02:02.299
sure that you're typing the correct

02:02.300 --> 02:03.409
command and so you don't get an

02:03.410 --> 02:04.789
error message. If you get an error

02:04.790 --> 02:05.749
message for some reason, that

02:05.750 --> 02:06.919
usually means you fat fingered

02:06.920 --> 02:08.149
something and it's double check

02:08.150 --> 02:09.669
yourself and go back and correct it.

02:10.190 --> 02:11.270
All right. Once you type that in,

02:11.280 --> 02:12.199
just go ahead and hit.

02:12.200 --> 02:13.200
Enter your keyboard.

02:13.210 --> 02:14.119
It's going to go ahead and run the

02:14.120 --> 02:15.480
scan here. Might take a moment.

02:15.500 --> 02:16.579
So I'm going to pause the video

02:16.580 --> 02:18.019
here. It usually takes about 15 to

02:18.020 --> 02:18.829
20 seconds.

02:18.830 --> 02:19.879
I'll pass the video. We'll pick it

02:19.880 --> 02:21.559
back up once I've got some results.

02:23.490 --> 02:24.869
First, you see, I've got my output

02:24.870 --> 02:25.919
again, it takes, you know, anywhere

02:25.920 --> 02:27.359
from 10 to 15 seconds, possibly a

02:27.360 --> 02:28.349
little longer, depending on your

02:28.350 --> 02:29.309
connection.

02:29.310 --> 02:30.809
But let's go to our main question

02:30.810 --> 02:32.189
that we had on our lab document

02:32.190 --> 02:34.139
here. Question number one is port

02:34.140 --> 02:35.699
number 80. Is it filtered or

02:35.700 --> 02:37.049
unfiltered? So if we look at our

02:37.050 --> 02:38.849
output here, you'll see the second

02:38.850 --> 02:40.499
line from the bottom shows us Port

02:40.500 --> 02:41.279
80 there.

02:41.280 --> 02:42.946
And we see that it's unfiltered in

02:43.020 --> 02:44.020
this situation.

02:45.400 --> 02:46.419
All right, so in this video, we just

02:46.420 --> 02:48.009
read a quick acknowledgment scan

02:48.250 --> 02:49.239
again, you could do things more in

02:49.240 --> 02:50.379
depth. Look, we could put an actual

02:50.380 --> 02:51.997
range of IP addresses there if we

02:52.060 --> 02:53.739
wanted to, but we're not going to do

02:53.740 --> 02:54.809
that for this particular lab.

02:54.820 --> 02:55.929
I just wanted to keep it simple for

02:55.930 --> 02:57.639
you, but also keep in mind that

02:57.640 --> 02:59.289
these are all particular tasks that

02:59.290 --> 03:00.789
you want to know and understand how

03:00.790 --> 03:02.229
to do when we move into the

03:02.230 --> 03:03.759
assessment phase of this particular

03:03.760 --> 03:04.300
course.