WEBVTT

00:01.310 --> 00:02.419
Hi, everyone, welcome back to the

00:02.420 --> 00:03.799
course. So in the last video, we

00:03.800 --> 00:05.089
went ahead and launched her career

00:05.090 --> 00:06.609
Impact Pro and we ran our first

00:07.280 --> 00:08.809
scans. So again, we ran the fast

00:08.810 --> 00:10.489
scan. If you haven't done that yet,

00:10.490 --> 00:11.810
you'll definitely want to do so

00:11.930 --> 00:13.009
before you continue on on this

00:13.010 --> 00:14.809
video. So going pause this one, go

00:14.810 --> 00:16.398
back to the last video and make sure

00:16.400 --> 00:17.899
you run that initial scan here.

00:18.500 --> 00:19.759
As I mentioned, it takes roughly

00:19.760 --> 00:20.869
about four to five minutes to run

00:20.870 --> 00:22.309
the scan. I just went ahead and

00:22.310 --> 00:24.109
stopped the video and we pick things

00:24.110 --> 00:24.889
back up in this one.

00:24.890 --> 00:26.059
So you'll notice here at the top.

00:26.060 --> 00:27.980
Right. My status now has finished.

00:28.190 --> 00:29.599
So I'm all finished with that fast

00:29.600 --> 00:30.499
scan.

00:30.500 --> 00:31.789
So let's go back to our lab document

00:31.790 --> 00:32.929
here. So we've gone ahead and ran

00:32.930 --> 00:34.670
our fast scan here in step 19.

00:35.510 --> 00:36.833
Now, instead, 20 cut in the

00:37.340 --> 00:38.569
center of our screen here is kind of

00:38.570 --> 00:39.920
the bottom part of the center.

00:40.160 --> 00:41.777
We see our results and we see the

00:41.780 --> 00:43.669
devices that we found in the scan.

00:44.720 --> 00:46.039
So, of course, no one here is going

00:46.040 --> 00:47.689
to be on once we click on the wind

00:47.690 --> 00:48.690
file.

00:49.010 --> 00:50.269
What's the operating system?

00:50.270 --> 00:51.229
So that's question number one.

00:51.230 --> 00:52.219
So I want you guys to go ahead and

00:52.220 --> 00:53.039
answer that one there.

00:53.040 --> 00:54.739
So if I click on the wind file here,

00:56.270 --> 00:58.034
we can take a look in the bottom box

00:58.100 --> 00:59.419
here and we can take a look and see

00:59.420 --> 01:00.769
what kind of operating system is in

01:00.770 --> 01:01.770
use.

01:03.190 --> 01:05.439
All right, so for me, I see Windows

01:05.440 --> 01:07.440
2008 standeth

01:07.450 --> 01:08.773
out hypervisor service back

01:09.280 --> 01:10.897
on there, and you should have the

01:11.020 --> 01:12.099
same result in year end unless

01:12.100 --> 01:13.569
something's dramatically changed

01:13.810 --> 01:15.249
when you're watching this video from

01:15.250 --> 01:16.250
the time I filmed it.

01:16.600 --> 01:17.980
But I do not anticipate that.

01:17.990 --> 01:19.060
So we should be good to go.

01:20.080 --> 01:20.949
All right. So now we're going to run

01:20.950 --> 01:22.359
a little a little longer

01:22.780 --> 01:24.010
out a little more in depth scan,

01:24.610 --> 01:25.659
sort of go ahead and do that now.

01:25.690 --> 01:26.529
So same thing here.

01:26.530 --> 01:27.549
We're going to go back to the network

01:27.550 --> 01:28.550
information gathering.

01:28.690 --> 01:29.679
So we're going to double click out

01:29.680 --> 01:30.720
on the top left here.

01:31.780 --> 01:32.829
So let's go into that now.

01:33.020 --> 01:35.019
Again, it opens up our Wizzard for

01:35.020 --> 01:36.609
us. We're just going to say next to

01:36.610 --> 01:38.469
that initial one there, we're also

01:38.470 --> 01:39.880
going to just stay with core impact,

01:40.330 --> 01:41.947
Will, and we're going to keep IPV

01:42.370 --> 01:44.200
Virgencita excuse me for for

01:44.830 --> 01:46.389
as well as our network range.

01:46.390 --> 01:47.390
We'll leave that alone.

01:47.500 --> 01:48.579
Now, here's where we will

01:48.580 --> 01:49.580
differentiate it.

01:49.610 --> 01:50.409
We're actually going to do a

01:50.410 --> 01:51.219
detailed scan.

01:51.220 --> 01:52.569
So let's go back to our lab document

01:52.570 --> 01:53.570
here.

01:53.590 --> 01:54.909
So we've gone through Sep 22.

01:54.910 --> 01:56.949
We went ahead and click next after

01:56.950 --> 01:58.509
we launched the network information

01:58.510 --> 01:59.510
gathering wizard, we

02:00.340 --> 02:01.959
left the default as core impact pro.

02:01.960 --> 02:03.610
We left it as IPV for

02:03.850 --> 02:05.709
and we also left our IP address

02:05.710 --> 02:06.730
range intact.

02:07.180 --> 02:09.159
And then again, the only change

02:09.160 --> 02:10.630
here is we're instead going to

02:10.990 --> 02:12.459
be running a detailed scan this

02:12.460 --> 02:14.379
time. So I want to stress this

02:14.380 --> 02:15.699
one will probably take more than

02:15.700 --> 02:16.700
five minutes.

02:16.870 --> 02:18.069
This one probably takes closer to

02:18.070 --> 02:19.930
seven or eight minutes to complete.

02:19.940 --> 02:21.069
So just keep that in mind.

02:21.520 --> 02:22.809
I'll go ahead and pause video once

02:22.810 --> 02:24.329
I've launched this one here and

02:24.340 --> 02:25.630
we'll pick it back up once it's

02:25.750 --> 02:26.860
completed on my end.

02:27.310 --> 02:28.359
But go ahead and feel free to pause

02:28.360 --> 02:29.679
the video as well on your end so you

02:29.680 --> 02:30.680
can pause it and

02:31.630 --> 02:33.369
take a look once we pick things back

02:33.370 --> 02:34.449
up, once it's actually finished to

02:34.450 --> 02:35.379
scan.

02:35.380 --> 02:36.458
So leave it as default

02:37.210 --> 02:39.099
of detailed here and then just say

02:39.100 --> 02:40.100
next.

02:40.630 --> 02:41.889
The other thing you want to do here

02:41.890 --> 02:43.539
is just uncheck this box is top

02:43.540 --> 02:45.159
boxes says perform surveillance

02:45.160 --> 02:46.809
cameras of fingerprinting because we

02:46.810 --> 02:48.009
don't actually have surveillance

02:48.010 --> 02:49.749
cameras hooked up here, so

02:50.020 --> 02:51.009
we'll not do you any good.

02:51.010 --> 02:52.360
So just go ahead and check that box

02:52.660 --> 02:53.589
and then just click the finish

02:53.590 --> 02:54.590
button next.

02:54.670 --> 02:55.749
And so what you'll see here is

02:55.750 --> 02:57.159
you'll see that scan that we just

02:57.160 --> 02:58.434
started running on the top

02:59.020 --> 02:59.979
right here.

02:59.980 --> 03:00.819
So, again, I'm going to go ahead,

03:00.820 --> 03:02.289
pause the video here and pick it

03:02.290 --> 03:03.907
back up once this is finished and

03:04.240 --> 03:05.109
you could do the same thing.

03:05.110 --> 03:06.580
You can pause this video here

03:07.090 --> 03:08.740
as well. And once it

03:08.920 --> 03:10.569
once you're finished is on your end,

03:10.720 --> 03:11.919
you can pick things back up.

03:14.140 --> 03:15.610
All right. So welcome back.

03:15.910 --> 03:17.576
My scan is finish on my end again.

03:17.710 --> 03:18.729
If you're scared, still going.

03:18.730 --> 03:19.990
You can go ahead, pause the video

03:20.200 --> 03:21.429
and just wait until your scan

03:21.430 --> 03:23.199
finishes or you can just follow

03:23.200 --> 03:24.964
along and then finish out the lab as

03:25.150 --> 03:26.150
yours finishes.

03:26.680 --> 03:28.689
So we went ahead and ran our

03:28.900 --> 03:30.030
detailed scans.

03:30.050 --> 03:31.329
We go back to our lab document here.

03:31.330 --> 03:32.559
You'll see if that ticks.

03:32.800 --> 03:34.209
We went ahead and ran our detailed

03:34.210 --> 03:36.009
scan. If you recall, we uncheck that

03:36.010 --> 03:38.289
box regarding the secure security

03:38.290 --> 03:40.054
or surveillance cameras just because

03:40.210 --> 03:41.109
we don't have any of those hooked

03:41.110 --> 03:42.490
up. And this particular lab

03:42.970 --> 03:44.587
and it took for me, it took right

03:44.680 --> 03:45.709
around just about two

03:46.630 --> 03:47.439
or three minutes, actually.

03:47.440 --> 03:48.580
So it's pretty quick this time.

03:49.060 --> 03:50.289
But normally it was taking me about

03:50.290 --> 03:51.369
four to five minutes. So hopefully

03:51.370 --> 03:52.870
yours is going quickly as well.

03:53.620 --> 03:55.090
So my scans finished.

03:55.390 --> 03:56.664
The question I want you to

03:57.400 --> 03:59.259
look at in answer is,

03:59.560 --> 04:00.999
do you notice any differences in the

04:01.000 --> 04:02.349
results between the faster the

04:02.350 --> 04:03.159
detailed scans?

04:03.160 --> 04:05.319
So if we go back to our

04:05.950 --> 04:07.567
scan output here, so if we take a

04:07.750 --> 04:09.269
look at our detailed one, do we

04:09.610 --> 04:11.374
notice any additional information or

04:11.470 --> 04:13.839
any different information from

04:13.840 --> 04:15.280
the previous scan that we ran?

04:15.850 --> 04:16.929
So it's kind of a around at the

04:16.930 --> 04:17.959
different results and

04:18.880 --> 04:20.289
see if you notice any differences at

04:20.290 --> 04:21.290
all.

04:22.640 --> 04:24.159
So for me, I do notice that the

04:24.470 --> 04:26.029
detailed scan does produce a little

04:26.030 --> 04:27.696
more results, so if you go back up

04:27.920 --> 04:29.120
here to this one here,

04:29.870 --> 04:31.819
we don't see quite as in-depth

04:32.000 --> 04:33.860
information on each particular

04:34.220 --> 04:35.220
item.

04:36.630 --> 04:38.198
It does it does tell us a little

04:38.220 --> 04:39.788
more about these unknowns, or at

04:39.900 --> 04:41.309
least as sure it doesn't look like

04:41.310 --> 04:42.359
it has.

04:45.730 --> 04:47.494
More information, but it actually is

04:47.650 --> 04:48.777
not looking like it did

04:49.480 --> 04:50.480
properly, so what we

04:51.310 --> 04:52.839
should see with a detailed scan is

04:52.840 --> 04:54.069
more information on these targets

04:54.070 --> 04:55.660
specifically. It should be actually

04:56.380 --> 04:57.703
naming this one for us, but

04:58.300 --> 04:59.199
it's not doing so.

04:59.200 --> 05:00.309
It looks like there may be an error

05:00.310 --> 05:01.976
in this particular lab, but do you

05:02.110 --> 05:03.939
get the overall concept if we run

05:03.940 --> 05:06.040
a quick scan or, you know, something

05:06.310 --> 05:08.199
basically a fast scan, it's

05:08.200 --> 05:09.964
not going to produce as much results

05:10.120 --> 05:11.688
in a vulnerability scan as if we

05:12.010 --> 05:13.539
do a detailed scan now, keeping in

05:13.540 --> 05:15.729
mind that we're touching

05:15.940 --> 05:16.990
the target right now.

05:17.020 --> 05:18.129
Right. So with a vulnerability

05:18.130 --> 05:19.410
scanner, we're touching this target.

05:19.420 --> 05:20.949
So they're going to know we're doing

05:20.950 --> 05:21.950
something.

05:22.360 --> 05:23.499
And there's ways, you know, we can

05:23.500 --> 05:24.774
obfuscate who we are, etc.

05:24.850 --> 05:25.659
but they're going to, generally

05:25.660 --> 05:27.609
speaking, know who

05:27.910 --> 05:28.839
you know. They're going to know that

05:28.840 --> 05:30.610
somebody's scanning their system

05:30.790 --> 05:32.799
and or their systems and looking

05:32.800 --> 05:34.515
at the information and potentially,

05:34.600 --> 05:35.889
you know, they're going to assume

05:35.890 --> 05:37.870
that's going to be an attacker and

05:38.320 --> 05:39.159
shut us down.

05:39.160 --> 05:40.149
Essentially, you know, if we're using

05:40.150 --> 05:41.199
a particular IP address, if we're

05:41.200 --> 05:42.866
not asking it for some unbeknownst

05:43.240 --> 05:44.739
reason, they're going to probably

05:44.740 --> 05:45.740
shut us down.

05:45.850 --> 05:47.614
So this is an easy way to trigger an

05:47.740 --> 05:49.149
I.D. rips system,

05:49.780 --> 05:51.519
but it is a valuable

05:52.090 --> 05:53.019
approach.

05:53.020 --> 05:54.519
Once you're in the enumeration phase

05:54.520 --> 05:55.941
to specifically find a lot of

05:56.020 --> 05:57.819
vulnerabilities, you'll see it more.

05:57.820 --> 05:59.260
When we do the open source lab,

05:59.530 --> 06:00.849
you'll see it'll make a lot more

06:00.850 --> 06:01.959
sense because we'll actually be able

06:01.960 --> 06:04.160
to see a listing of vulnerabilities.

06:04.810 --> 06:06.009
So in this video, we just wrapped up

06:06.010 --> 06:07.389
our discussion on core impact.

06:07.390 --> 06:09.154
Again, we just ran a couple of quick

06:09.250 --> 06:10.250
scans to potentially

06:11.230 --> 06:12.129
take a look. There are different

06:12.130 --> 06:13.569
results. It looks like this time

06:13.570 --> 06:15.009
around it was not functioning

06:15.010 --> 06:16.431
properly for some reason, but

06:16.570 --> 06:18.040
generally speaking, it is.

06:18.130 --> 06:19.796
You can probably assume a detailed

06:20.140 --> 06:21.369
scan is going to provide a lot more

06:21.370 --> 06:22.938
information than a quick or fast

06:23.290 --> 06:24.290
scan.

06:24.790 --> 06:25.959
So, again, join me in the next video

06:25.960 --> 06:27.550
where we wrap up our second lab

06:27.790 --> 06:29.409
and we'll be covering open valves in

06:29.410 --> 06:30.220
that particular lab.