Hello everybody and welcome back.
And this tutorial will finally start covering some of the basics of the MFA program.
Now as I said before the end map is a really important tool that you will use all the time.
So it is essential for you to at least talk to some of the basics of the program.
Now before we begin I want to say that and map it is our network mapper.
It is basically a free and open source tool mostly used for vulnerability scanning and discovery.
You can also use the map to identify some of these devices or all of the devices that are running on
your local network.
Also as discovering hosts that are on or off line at the moment and discovering services they offer
on some of the ports that they have opened and also you can go as far as discovering what version of
software are they running on the open ports now and map can be used to scan multiple hosts.
She doesn't have to be only one host that you can.
It's basically working by just sending the raw packets to the system ports.
Now as it does that it basically listens to responses and determines whether the ports are closed or
open or filtered in some way.
For example with the firewall.
Now you can use different types of protocols in map.
You can use DCP UDP ICMP and as CTP.
Now as I said before and map is a network mapper.
It can also be used to be to detect the operating system that is running on and the machine that you're
scanning and also discover the vulnerabilities if there are for that particular version of the software
they're running on an open port now a system your and my PC you can have sixty five thousand five hundred
thirty five disappear UDP ports but net and Matt will by default only scan the most commonly used 1000
ports.
Now you can change that as well.
So you can scan the all the 65000 ports but it will probably take a lot longer than the regular 1000
ports
now before we begin using a map.
I just want to show you first of all how you can run it which is basically just open your terminal in
clinics.
It is already pre installed in it and you can just type here and map.
Now you will see that it will print out a bunch of the options that we will cover.
But before we do that we I just want to give you a more detailed explanation on the IP addresses because
you will be using them extensively in here.
Now with an IP address if you know someone's IP address you can basically do a lot with it.
For example let's open up our Firefox
and let us type right here.
The major IP you will click on the first Web site that this one opens and we basically just copy and
the IP address that we find and we will try to find out the most information we can about that IP so
let me just load up the website.
Here we go.
Now click on the first one which is major IP addresses blocked by country.
Uh dash near soft.
So it is only in your support website.
You here you can basically click any.
Any country want.
Let's go with the Australia
not really a smart choice since it is the most far away country for me but here just pick any IP address
you want.
Let's say let's say I pick this one which is 14 that one to do that one sixty zero.
I copy this IP address and they go to my terminal.
Let me just clear the screen right here
and they use it to code.
And as look up you can see with this tool I will need to specify the IP address I just copied which
is this one and it should return the name of that web server in return.
So if I type here right here it will say server can find.
OK so it cannot find that one.
Not a big deal.
Let us just copy the other one and check that one works instead.
So we just basically other IP address and wont work.
Now let me just show you on the IP address that will work for sure.
So if you type here and look up Google dot com it will return to Google's IP address with this command.
As you can see right here the address of Google will be 172 dot on that.
Two hundred and seventeen that 19 that one hundred and ten.
Now you can do the same in reverse.
So if you type here and look up the lookup and instead of the typing the Google dot com you type here
the IP address of Google dot com you will see in return what is the name of that IP address.
Now this taking some time but I'll just wait a little bit before we close it
this time out.
So let me try it once again.
So this look up and then I pay you the IP address Google it probably time out once again.
So let me just type here and look up and let's try Facebook dot com.
Here we can see that the Facebook IP address is 32 the 13 that 84 the 36.
So let's try in reverse.
So let me just type here and look up and then Facebook is IP address and hopefully it will return the
Facebook dot com in the output.
Now weird because it says no servers could be reached.
Let me just try to ping it maybe but we are on the internet so it should work.
Not really sure why it doesn't work at the moment but it doesn't really matter.
Instead we can try other command which can be also used to get some of the informations from an IP address.
Now that's some that tool that we will use is called Call.
Now for example let me show you if you take your call IP info that you see.
Yes.
Dot I.
Oh.
And then slash it just find the slash where is it.
There it is.
And then you paste it Facebook the IP address right here and you click on it you press Enter basically
it will say that the IP that we type here whose name is Facebook dot com city not specified region region
not specified country is specified and location is also given coordinates organization as it says right
here is Facebook.
So since and lookup didn't work we will use chrome.
So let me just look up the Google's IP address once again so we can see the CO command with Google's
IP address so I can just type your call IP info that type O and then slash and then you type here the
Google's IP address
and as you can see we also get the hostname we also get the organization Google location also given
in the coordinates and the country US.
So let us just not choose any of these IP addresses right here but let's now go with Australia.
Let's go with these Belgium.
And here we just copy any IP address.
Let's copy this one.
Let me try the NSA lookup.
Maybe it will work right now.
Probably not but let's give it one more try.
Server can find.
OK.
Does it matter a little go on with the clock.
So we copy the random IP address that we do not know anything about.
And we just type your IP info that I owe slash and then we paste the IP address that we copied which
should belong to him.
So as we see right here we are giving the IP the city the region the country location also given in
the coordinates postal code organization which we can confirm since it says for this IP address right
here that the Met Max telecom and we get the same result right here no.
You can see that you can find a lot of stuff with simply just looking up the IP address and there is
also one more thing you can do in the search engine.
You can just type your IP locator and we can use the same IP address that we copied from here which
is this one.
80 that 91 that 144 to zero and we will just pick the first site which will hopefully locate our IP
address.
If we type here paste and we go on the IP lookup
we can see right here that we get the location of the IP which is Belgium and it is correct.
We also get the latitude and longitude which we can check if it if it matches this one.
So let's just go down here.
It is the same.
Basically it is the same in every decimal.
So this program is working so let me just see if we can check out on the map where it is located but
we can just simply go on any Google map and just type here this coordinates and we will find out where
this IP address is physically located.
Now now that we saw what we can do with the IP addresses we can open up our map for now on.
So if you just type here and map you will see again bunch of those options but we will start off with
these examples right here.
So as you can see right here they put an example and map minus three minus A's can meet that and map.
Dot org.
Now it is important to mention that and map scanning on the device you don't know you do not own or
do not have permission to scan is illegal in most of the countries I believe.
So you should not be scanning any website or any device that you do not have permission to scan and
it can also be very noisy.
So you can be called by firewall.
So you are not anonymous with this especially not with the basic commands.
Now later on we can cover how to be more quiet while using a map and scanning but you should only be
doing it if you have permission to scan to.
Now if you go on to this Web site you will notice that if we copied that we just opened Firefox once
again and we will page that Web site you will see the day give us the permission to use that Web site
in order to practice with and map.
So let us just wait for this to load up and it should be prompting us with the message that will basically
said go ahead and scan me as you can see right here.
So here it says Hello and welcome to scan me and that org we set up this machine to help folks learn
about and map and also to test and make sure that their n map installation is working properly you are
authorized to scan this machine with any map or other port scanners.
Try not to hammer on the servers too hard.
Few scans in a day is fine but don't scan 100 times a day or use this site to test your asset a brute
force password cracking tool.
So we basically have permission to scan this.
Now don't talk or scan it as it says right here.
Don't scan it over 100 times a day.
Basically you can send a few times a day.
So we will just step here and map minus the minus K scan me and map.
Talk but before we run this comment I just want to check out or to show you what does minus fee and
minus a do now minus a as we can see right here enable always detection vision detection script scanning
and trace wrote while minus B measure if it is even listed here possibly and possibly not
here it is increased verbosity level basically means to print out what it is doing in the process of
scanning.
So if you type here minus VB It will print out even more information in the process of scanning.
Now we won't be using any of these options at the moment we will just type here and maps can meet that
and map the pork and this can take time and it can can take time from few seconds to multiple hours
depending of multiple things such as to the speed of your connection and also the location of the target
that you're scanning and also the number of targets that you're scanning.
As we said before you can scan multiple targets with a map and that will take longer than scanning just
one target if you just press the arrow upwards.
Right here we can see how many what percentage of scan is finished.
So we can see that seven point four percent is done.
And here it will give us an information that one hosted.
So for example if you were to scan a hundred hosts and here it says twenty two hosts up it means that
the map retrieved twenty two hosts to be online or up and working.
Now as you can see the end maps can result it's finished and here we see a bunch of boards.
Some of them are filtered and some of them are open.
As we said the filtered ones could be protected in some of the way such as with a firewall while the
open ones are basically just open such as HDP as we saw basically when we visited this website.
We basically use the ETP port which is open.
So we were able to connect to this website and there are other ports that are also open such as as a
stage port which is the 22 always DCP port can see some of the high ports open such as 9 9 2 9 and 3
1 3 3 7 which is for Allied and pink Tash echo and other ports are just filtered.
So this is just a basic scan with a map.
We will continue with some of the more advanced scans in the next lecture and I hope I see you there
by.