WEBVTT 00:00.840 --> 00:02.129 Hey, everyone, welcome back to the 00:02.130 --> 00:03.599 course. So in the last video, we 00:03.600 --> 00:05.700 racked up our lab on Skåne, 00:05.880 --> 00:07.799 so we went ahead and used an map 00:07.800 --> 00:09.060 as well as paying three. 00:09.070 --> 00:10.785 We focused on those for most of our 00:10.800 --> 00:12.417 commands as well as we went ahead 00:12.690 --> 00:14.429 and modified Windows firewall, which 00:14.430 --> 00:16.170 again, essentially all we did was 00:16.560 --> 00:17.969 go ahead and turn Windows firewall 00:17.970 --> 00:19.734 on. So we ran a command for that and 00:19.770 --> 00:21.029 then we ran a command after we 00:21.030 --> 00:22.829 turned the firewall on to notice any 00:22.830 --> 00:23.830 differences at all. 00:24.390 --> 00:25.829 So if you ever watched that series 00:25.830 --> 00:27.545 of videos yet, go back to those and 00:27.750 --> 00:28.979 watch that. And now we're going to 00:28.980 --> 00:30.510 move into module four in this video 00:30.720 --> 00:31.889 with our fingerprinting. 00:31.890 --> 00:32.960 So we're going to talk about Alwis 00:32.970 --> 00:34.649 fingerprint. Now, we're not going 00:34.650 --> 00:36.209 over a huge in-depth fingerprinting 00:36.210 --> 00:37.679 because we're primarily focused on 00:37.680 --> 00:38.639 scanning. 00:38.640 --> 00:39.719 But during our scanning at a 00:39.720 --> 00:41.459 numeration phase, we want to go 00:41.460 --> 00:43.169 ahead in the enumeration portion and 00:43.170 --> 00:44.399 talk about operating system 00:44.400 --> 00:46.019 fingerprinting. So all that means is 00:46.020 --> 00:47.579 we're trying to figure out what 00:47.580 --> 00:49.499 operating system is in use on our 00:49.500 --> 00:50.500 particular target. 00:51.860 --> 00:53.089 So for this, we're going to use a 00:53.090 --> 00:54.200 cyber lab environment. 00:54.350 --> 00:55.999 Now, again, you can use essentially 00:56.000 --> 00:57.349 for this course, I try to design it 00:57.350 --> 00:59.016 where you can use your own virtual 00:59.270 --> 01:00.889 machine. But keeping in mind that 01:00.890 --> 01:02.507 your IP addresses and some of the 01:02.570 --> 01:03.949 commands might be slightly different 01:03.950 --> 01:05.030 in your particular setup. 01:05.870 --> 01:07.339 So let's go ahead and get started 01:07.340 --> 01:08.179 here. So we're just going to search 01:08.180 --> 01:09.944 for ethical hacker once we're logged 01:09.980 --> 01:11.299 into the cyber website, which, 01:11.300 --> 01:12.169 again, if you're watching this 01:12.170 --> 01:13.170 course, you should be. 01:13.520 --> 01:14.419 And we're going to choose this 01:14.420 --> 01:16.120 certified ethical hacker, S.H. 01:16.250 --> 01:17.359 set of labs here. 01:17.990 --> 01:18.919 We're just going to click the launch 01:18.920 --> 01:19.849 button. 01:19.850 --> 01:20.929 It's going to give us another screen 01:20.930 --> 01:22.009 here where we click on the launch 01:22.010 --> 01:23.329 item and that'll actually launch the 01:23.330 --> 01:24.680 lab environment for us. 01:25.280 --> 01:26.269 And you'll see on the left side 01:26.270 --> 01:27.439 here, all the labs will pull up. 01:29.280 --> 01:30.689 So here we're going to be looking 01:30.690 --> 01:32.549 for the OS fingerprinting lab 01:32.550 --> 01:33.539 or the operating system 01:33.540 --> 01:35.069 fingerprinting lab, you'll see it's 01:35.070 --> 01:36.442 the first fourth option down 01:36.930 --> 01:37.859 here on the left side. 01:37.860 --> 01:39.090 So we'll go ahead and click on that. 01:39.450 --> 01:41.099 You'll see a start button click on 01:41.100 --> 01:42.329 that. And that'll actually launch 01:42.330 --> 01:43.979 our lab where we see our virtual 01:43.980 --> 01:44.980 machines. 01:45.300 --> 01:46.499 So now we want to go ahead and turn 01:46.500 --> 01:47.339 on all these machines. 01:47.340 --> 01:48.719 So the way we do that is just hover 01:48.720 --> 01:50.549 your mouse over top of the name 01:50.550 --> 01:52.265 section here and you'll see a power 01:52.350 --> 01:53.540 on option right there. 01:53.550 --> 01:54.779 So just go ahead and click on that 01:55.110 --> 01:56.639 and then click power on on that one 01:56.640 --> 01:57.749 and just make sure you're turning on 01:57.750 --> 01:58.750 all these machines. 01:58.770 --> 01:59.609 Now, it's going to take a few 01:59.610 --> 02:00.989 seconds to pull all of them up. 02:00.990 --> 02:01.959 So I'm going to go ahead and pause 02:01.960 --> 02:03.629 video here and we'll use the magic 02:03.630 --> 02:04.630 of fast forwarding. 02:04.740 --> 02:06.239 And once it's complete and put it 02:06.240 --> 02:07.319 all the machines up, we'll go ahead 02:07.320 --> 02:08.939 and restart the video, move forward 02:09.150 --> 02:10.150 in our lab. 02:11.290 --> 02:12.879 All right, so you see here, we've 02:12.880 --> 02:14.039 put it up all our machines. 02:14.050 --> 02:15.339 Now, again, if you haven't started 02:15.340 --> 02:16.809 all your virtual machines, go ahead 02:16.810 --> 02:17.810 and pause this video. 02:17.890 --> 02:19.119 Make sure you put those up because 02:19.120 --> 02:20.541 you will need them as we move 02:20.590 --> 02:21.590 forward in the lab. 02:22.600 --> 02:24.039 So let's go back to our lab document 02:24.040 --> 02:25.389 here, and again, these step by step 02:25.390 --> 02:26.649 guides are all in the supplemental 02:26.650 --> 02:27.609 resources sections. 02:27.610 --> 02:29.199 You download them all in one shot 02:29.380 --> 02:30.639 and those who cover all the labs 02:30.820 --> 02:31.839 we're doing in this particular 02:31.840 --> 02:33.699 course, alongside that, 02:33.700 --> 02:35.139 there's some assessment information 02:35.290 --> 02:36.999 inside the supplemental resources. 02:37.000 --> 02:37.959 So make sure you do those 02:37.960 --> 02:39.381 assessments to actually fully 02:39.610 --> 02:41.169 practice your skills as we've gone 02:41.170 --> 02:42.170 through the course. 02:43.370 --> 02:44.419 So our next step here, we're going 02:44.420 --> 02:45.709 to click on the Windows 10 machine, 02:45.710 --> 02:46.935 which is the Lab 110 here 02:47.630 --> 02:48.630 and step six. 02:48.710 --> 02:49.789 So let's go ahead and do that now. 02:49.810 --> 02:50.959 It's going to launch up that machine 02:50.960 --> 02:52.879 for us and it might take a second 02:52.880 --> 02:54.289 or so for the desktop to fully come 02:54.290 --> 02:55.290 up for us here. 02:55.670 --> 02:56.929 Once it does that, we're going to 02:56.930 --> 02:58.429 double click on the Vincey viewer 02:58.430 --> 02:59.839 icon. So it's that orange colored 02:59.840 --> 03:01.159 icon. Kind of looks like a little 03:01.340 --> 03:02.340 tiger's eye. 03:02.720 --> 03:03.859 We're going to double click on that. 03:03.860 --> 03:05.209 And then what we should see is the 03:05.210 --> 03:06.529 IP address of our Kelly Linux 03:06.530 --> 03:07.853 machine in the box already. 03:08.300 --> 03:09.439 And then we'll just click the Connect 03:09.440 --> 03:10.861 button and enter our password 03:11.300 --> 03:12.300 in. 03:12.740 --> 03:13.740 So let's go ahead and do that now. 03:13.760 --> 03:14.689 So it is going to double click on 03:14.690 --> 03:15.690 this icon here. 03:15.710 --> 03:17.180 You'll see it does have the IP 03:17.240 --> 03:18.619 address of the Calli Linux machine 03:18.620 --> 03:20.149 in there for us. So all we have to 03:20.150 --> 03:21.409 do is click the Connect button 03:22.550 --> 03:23.659 and now we just need to put in our 03:23.660 --> 03:24.983 password, which is the word 03:25.220 --> 03:27.289 password. So capital P 03:27.290 --> 03:29.389 and then lowercase HSW. 03:29.540 --> 03:30.529 And then we're actually going to do 03:30.530 --> 03:32.239 the number zero and not a capital or 03:32.240 --> 03:34.189 lowercase O and then a lowercase 03:34.190 --> 03:35.119 already to finish out. 03:35.120 --> 03:36.409 So capital P 03:37.430 --> 03:39.050 lowercase a s s 03:39.260 --> 03:40.289 w again the number is 03:41.120 --> 03:43.369 zero and then lowercase 03:43.370 --> 03:44.889 r d. Once you've taught that in 03:44.930 --> 03:46.204 either click the button or 03:46.820 --> 03:48.229 just press enter a new keyboard. 03:48.410 --> 03:49.520 Now that will actually pull up our 03:49.930 --> 03:51.470 Kelly Linux desktop for us. 03:52.070 --> 03:53.359 You'll see this little error message 03:53.360 --> 03:54.859 here. We don't worry about that for 03:54.860 --> 03:56.359 our lab. Just click on the OK button 03:56.360 --> 03:57.360 that will close that out. 03:58.580 --> 03:59.749 And then if we go back to our lab 03:59.750 --> 04:01.249 document here, our next step is here 04:01.250 --> 04:02.029 in step ten. 04:02.030 --> 04:02.959 We're just going to double click on 04:02.960 --> 04:04.490 that root terminal icon 04:04.820 --> 04:06.109 and that launch a terminal window 04:06.110 --> 04:07.429 for us. Now, again, if you're using 04:07.430 --> 04:09.047 your own set up, you're just open 04:09.380 --> 04:11.119 a regular terminal window and you'll 04:11.120 --> 04:12.679 want to adjust the IP addresses for 04:12.680 --> 04:14.539 your particular network 04:14.540 --> 04:15.619 and whatever you're using on your 04:15.620 --> 04:16.620 side. 04:17.149 --> 04:18.469 So we'll double click the terminal 04:18.470 --> 04:19.879 icon for those using the Siberry 04:19.880 --> 04:21.739 labs and then a launch, a terminal 04:21.740 --> 04:22.740 window for us. 04:23.470 --> 04:24.669 And might take a second or so there 04:24.670 --> 04:25.670 we go. 04:25.810 --> 04:27.249 All right, so now everyone should be 04:27.250 --> 04:28.329 in the same spot. We're just going 04:28.330 --> 04:29.619 to type in this command here. 04:29.620 --> 04:31.119 So and map all lowercase 04:31.480 --> 04:33.610 space, dash lowercase s 04:34.570 --> 04:35.570 capital S.. 04:35.590 --> 04:36.729 So we're basically just performing a 04:36.730 --> 04:38.347 sound scan there, a space, a dash 04:38.620 --> 04:40.560 o to check our operating system. 04:40.810 --> 04:42.459 So again, for this lab, we're just 04:42.460 --> 04:43.709 checking our operating system. 04:43.720 --> 04:45.435 We're not checking anything else we 04:45.610 --> 04:46.835 could do a dash capital A 04:47.440 --> 04:48.489 and that would allow us to check 04:48.490 --> 04:49.510 other items as well. 04:50.020 --> 04:51.639 But here we're going to be checking 04:51.640 --> 04:53.529 the operating system itself and 04:53.530 --> 04:54.459 then we're going to run it against a 04:54.460 --> 04:55.750 couple of IP addresses here 04:56.380 --> 04:57.819 and we'll see what kind of output we 04:57.820 --> 04:59.229 get back. So our two questions we're 04:59.230 --> 05:00.399 going to try to answer here at the 05:00.400 --> 05:01.821 end. What operating system is 05:02.620 --> 05:03.943 in use for both of these IP 05:04.300 --> 05:05.699 addresses are. 05:05.980 --> 05:06.849 So let's go ahead and type this 05:06.850 --> 05:07.809 command in here. We're going to 05:07.810 --> 05:09.399 start off by just typing in and map 05:09.400 --> 05:10.527 space, dash lowercase s 05:11.350 --> 05:12.350 capital s 05:13.750 --> 05:15.549 so and map again all over case 05:15.820 --> 05:18.129 a space a dash lowercase 05:18.130 --> 05:19.389 s and a capital S.. 05:20.110 --> 05:21.549 We're going to put another space and 05:21.550 --> 05:23.189 then a dash and a capital O 05:24.280 --> 05:25.799 so you'll see here the capital O 05:26.230 --> 05:27.189 and then we're just going to put in 05:27.190 --> 05:28.270 our IP addresses here. 05:28.280 --> 05:29.589 So the one entity about one six 05:29.600 --> 05:31.269 eight zero one and 05:31.570 --> 05:32.570 four. 05:33.280 --> 05:34.570 So let's go ahead and do that now. 05:35.230 --> 05:36.609 So we're going to put a space then 05:36.610 --> 05:38.290 one attitude, two one six eight 05:38.920 --> 05:39.920 zero one 05:40.780 --> 05:42.339 air space and then one eighty two 05:42.340 --> 05:44.290 point one six eight zero 05:44.500 --> 05:45.500 four. 05:45.810 --> 05:46.839 All right. So once you type those 05:46.840 --> 05:48.039 in, just enter key and your 05:48.040 --> 05:49.510 keyboard. Now, it might take a 05:49.600 --> 05:50.649 moment or so to go ahead and run the 05:50.650 --> 05:52.029 scan. I'm going to pause the video 05:52.180 --> 05:53.619 and once it puts the output, we'll 05:53.620 --> 05:54.620 start back up again. 05:56.100 --> 05:57.269 All right, so we see that we've got 05:57.270 --> 05:58.109 our output now. 05:58.110 --> 05:59.009 Now, if you haven't gotten your 05:59.010 --> 06:00.389 output yet from running the scan, go 06:00.390 --> 06:01.529 ahead and pause this video and just 06:01.530 --> 06:02.699 wait until you get your output. 06:03.300 --> 06:04.939 And if it's taking a long time, just 06:04.950 --> 06:06.059 double check your command and make 06:06.060 --> 06:07.410 sure you type everything in 06:07.420 --> 06:08.319 correctly. 06:08.320 --> 06:10.619 It should only take about 10 seconds 06:10.620 --> 06:11.999 or so at kind of the max. 06:13.260 --> 06:14.459 All right. So let's go back to a lab 06:14.460 --> 06:15.329 document. We have a couple of 06:15.330 --> 06:16.829 questions. As I mentioned, we want 06:16.830 --> 06:17.909 to figure out the operating system 06:17.910 --> 06:19.380 in use basically for each I.P. 06:19.410 --> 06:20.819 address. So let's take a look at our 06:20.820 --> 06:22.079 results and we'll see what we got. 06:23.040 --> 06:24.419 All right. So we can answer the last 06:24.420 --> 06:25.469 question right now, since we're 06:25.470 --> 06:27.149 right at this portion of the screen, 06:27.150 --> 06:28.375 we see we got 192 one six 06:29.220 --> 06:30.360 eight zero four. 06:30.990 --> 06:32.558 And if we look here, we see that 06:32.580 --> 06:33.989 it's estimating that it's running 06:33.990 --> 06:34.949 Windows 10. 06:34.950 --> 06:36.149 So Microsoft Windows 10, 06:36.960 --> 06:38.189 10 machine IP address. 06:38.200 --> 06:39.839 So we're good on that one there. 06:41.020 --> 06:42.699 And if we scroll back up here just a 06:42.700 --> 06:44.529 little bit, you'll see that 06:44.530 --> 06:46.245 we have our output for the other IP 06:46.360 --> 06:47.360 address as well. 06:48.110 --> 06:49.699 So come up just a little bit more 06:50.120 --> 06:51.619 and you'll see that for this 06:51.620 --> 06:52.969 particular IP address or one hundred 06:52.970 --> 06:54.620 two point one six eight zero 06:54.800 --> 06:55.800 one, this one 06:56.720 --> 06:58.430 right here, you'll see that our 06:58.640 --> 07:00.061 estimated operating system in 07:00.470 --> 07:02.220 use is something related to windows. 07:02.240 --> 07:04.459 Now, it wasn't specific, 07:04.460 --> 07:06.169 right? So if we see here, we it may 07:06.170 --> 07:08.449 be Windows Server 2012, 07:08.630 --> 07:10.345 it may be Windows seven, et cetera, 07:10.640 --> 07:11.640 et cetera. 07:11.810 --> 07:13.329 So just keep in mind that it is 07:13.370 --> 07:15.036 showing that it's likely a Windows 07:15.110 --> 07:16.939 machine, but it doesn't know for 07:16.940 --> 07:18.559 sure what the operating system is. 07:19.190 --> 07:20.809 Now, we know that this IP addresses, 07:20.810 --> 07:22.639 we've learned throughout much 07:22.640 --> 07:23.929 of this course, this IP address 07:23.930 --> 07:25.489 happens to be for this server right 07:25.490 --> 07:27.290 here, the pleb S01. 07:27.500 --> 07:29.480 So in the likely event 07:29.870 --> 07:31.399 that we figured out as a Windows 07:31.400 --> 07:32.772 machine, and we know already 07:33.440 --> 07:35.509 from our our personal 07:35.510 --> 07:37.189 knowledge that it's a Windows Server 07:37.190 --> 07:39.019 machine, this is more than likely 07:39.020 --> 07:40.579 the operating system that's in use. 07:40.580 --> 07:41.929 And yes, it actually is the 07:42.110 --> 07:43.369 operating system that's in use on 07:43.370 --> 07:44.370 that particular device. 07:45.890 --> 07:46.969 All right, so this lab, we just went 07:46.970 --> 07:48.489 ahead and did a fingerprint, we 07:48.770 --> 07:50.059 checked to see what operating system 07:50.060 --> 07:51.139 was running on this particular 07:51.140 --> 07:52.140 target machines. 07:52.190 --> 07:53.239 And the next video, we're going to 07:53.240 --> 07:54.410 go over banner grabbing.