Hello everybody and welcome back.
No this is the to tutorial on the map program.
In the previous one I basically just show you what you can do with an IP address and what information
you can gather only by knowing someone's IP address.
And we also ran a simple scan on the map.
Scan me dot org Web site which basically allows us to do these can there.
So you should only be scan either that site or any machine you own since and map scans could be illegal
in your country.
Also before we begin I just want to let me just type here once again and map to show all the available
options.
Let me perform the same scan we did before which is just a map.
Scan Me
Not and map that org.
And basically if you wanted to for example write this to a file you just specify two arrows right here
and then we call the final results dot 60 for example.
Now this will take as previous time a few seconds and it won't give us the output right here.
It would basically save all of the output into our results.
Steve well so it is useful if you for example run scan for multiple hours and you don't need to keep
the terminal open in order to see the scan.
You can just basically save it into a file and you can access it anytime and anywhere.
So you don't for example run a scan on multiple hosts and write for five hours and then you accidentally
close a terminal.
And basically the entire scan is lost and you need to redo it once again.
So as you can see right here This scan has finished and it has given us any output.
So you can just click on the screen and type your unless and as you can see right here we have the results
that the file if we check that results the text file we will get the same output that we got in the
previous video with our results printed out into this file.
Now since we know that we can delete this file right now and we can type here and map once again.
Now I won't be scanning this can mean the end that org anymore.
I will be scanning basically my windows machine right now so you can continue scanning this site you
can also scan the methods playable that we installed in the previous lectures and you can also scan
your host machine.
Now let me just show you.
You can also scan yourself if we just check our I.P. address right here.
One ninety two that 116 that on that six and you typed here 192 that once you see that one that's six.
I don't believe any poor yeah all ports or 1000 scan ports are closed.
So on this Carolyn expert to machine I'm not having any port open and that should be on yours as well.
For now on at least and and as I said in the previous video in the end map only scans the top 1000 U.S.
ports.
So if you want to for example specify the number of ports you want to scan or for example you want to
scan all 65000 ports.
Let me just find the option sureties port specification and scan order.
We can do this do that with minus p.
So how we do that.
Well basically we just sit here and map minus B and then we type here one two sixty five thousand and
we can just do sixty five thousand.
Or we can do all sixty five thousand five hundred and thirty five.
I believe that's how many there are.
And then we specify again our our own IP address and this will take longer to finish but instead of
scanning only thousand ports it can all sixty five thousand five hundred thirty five ports and it will
finish relatively fast since we are scanning ourselves and it's only finished in one point five seconds.
So now we won't be scanning ourselves anymore since there is no point.
So let me just find out what the IP address of my windows machine is.
So I will type here in my command prompt I pick up and think and the IP address of my host machine is
one ninety 92 that 168 that one that for so I would just type here and map 192 that 168 that wanted
for.
And let's see how fast this will finish.
It shouldn't take too much of our time.
So let me just check here.
All right we'll finish and we can see there are a few ports open right here.
The net buyer says to send Microsoft.
Yes.
And M.S. RBC which are these three ports.
They're all three open as you can see they're all over DCP now for example let's scan again my machine
at right now let's scan all sixty five thousand ports so sixty 5 3 5 I believe that's the maximum number
of ports and we type here the IP address of our windows machine now.
Let me just.
Oh yes I.
I only specified that this should scan the this port I should specify a range of ports.
So one dash sixty five five hundred thirty five.
And we press here enter and this will take a little bit longer than the thousand port scan.
So let's see where it is right now.
Yeah.
It is only on 4 percent.
You can check out the process of scan it with the upper arrow if you didn't specify right here the minus
V which stands for deliverables which will basically just bring you this right here as it goes with
the scan.
I didn't specify it so it doesn't print anything before the so let me just show you we will finish this
so we don't wait until it's over.
So let me just put here.
Let me just let's just and map once again and we can see right here that the minus command stands for
increased verbosity level use double B which is basically minus V V in order to see more details.
So let's run the same command but with 1000 ports.
So let me just type here and map one end to that one here.
That one that for basically just minus minus will be.
So here you can see that as it goes with the scan it prints out the information and at the end it creates
out the same thing that it printed out before.
So here we can see as it went we need to conclude that there is one host that is up.
And as it discovered the open ports it printed out for us.
Now this can be useful if you want to find out the open ports on a host.
That will take an hour scan or for a range of hosts.
So let me just show you.
Let me just show you how you can scan a range of hosts for example scan your entire local network.
You can see right here that the second command in the examples shows us how to specify the range of
hosts.
So as you can see right here 182 that 168 0 0 0 slash 16.
This will basically scan the first 16 holes in the local network.
Now we know in my local network since my subnet mask is 255 255 255 0.
There are only two hundred and fifty five hosts available so we will just specify all of them.
Let me just type here and map and then we will type here.
182 168.
That one that one slash fifty five.
Can let us just put me up here.
Decaf and decaf to laugh which stands for basically doing this can fester.
So we do not waste a lot of time.
So let me just press enter right here.
No if you just check once again since this didn't work.
Maybe I specified wrong or basically gave me some error.
Let me just redo this comment but not like this.
Let me just type here instead of slash minus.
So right now it should work.
But let's also add the option verbosity so it prints us everything as it goes.
We can see that it found it actually finished relatively fast.
That is probably because we specified right here the minus f option which basically makes it scan finish
faster and we can see that all of these holes are down.
We can see that between these two there was one that is up which is not 15.
That is my laptop that is currently running.
So as we go down here it should find.
We found the our router.
Here it is.
So wanted to do that 168 that one that one.
It also found our windows whose machine which is my current vendor's stand machine on.
As my host operating system as you can remember here are the three open ports on my host machine.
It found my laptop which only has the Apache to running on the DP Port Power DCP and it also found our
virtual machine which is 182 that 168.
That one that 6 which has none of the ports open so the end result.
Finished with 255 IP addresses scanned and for hosts were up scanned in six point six seconds.
Now let's also for example if you want to write that into a file you can do that with the Caballero
comment and also into the results.
Dixie as we saw in the previous video it won't give you any output but it will write your scan into
the results that 60 files so you don't have to redo the scan once again later if you close the terminal.
So it should finish in a few seconds I believe and we will have a file with all 255 machines scanned
as you can see it has finished.
And if we can give results that the next day we will get the same output as in the previous scan now.
This is about it for this lecture.
We will continue with some of the more aggressive scans and more specified and the detailed scans in
the next lecture which will also be a map.
Will cover how to get the version of A C over software running on a specific port.
For example we will find out how to get the version of my Apache to uh on my laptop which is running
away CTP.
As you can see right here we don't get the version specified but it is an important option because it
allows us to find out the version of a software which can be used in order for us to find out any reliability
for that particular software.
So I hope I see you in the next lecture and ticker.