Hello, my name is Stephan.
In the previous lecture we delved into the topic of obtaining traceroute geolocation information using
Nmap.
Traceroute is a technique that maps network paths by tracing the hops between the origin and destination
and adding geolocation information to the traceroute results can provide valuable insights.
To accomplish this we can leverage nmap traceroute functionality along with the traceroute geolocation
and c scripts.
So to begin, let's explore how to obtain traceroute geolocation information of a remote target using
nmap.
Nmap can network paths by tracing the hosts between the origin and destination, so geographical information
can be useful when tracing events and we can include it with the nmap traceroute functionalities with
some help from traceroute location scripts.
In this lecture we will use nmap to obtain traceroute geolocation information of a remote target.
Now to obtain trace or geolocation information of the intermediary hops.
You can use this pseudo nmap command.
So we will use we will start the map with superuser privileges.
So sudo nmap here.
So we will add trace route and we will also add script here.
So we will use the traceroute traceroute geolocation script and scripts.
So trace route geolocation and after that you will enter the target.
In this case it's going to be code.org code sally.org.
You know it's code Silicom.
Here and here.
We will get an output here.
And as you can see, it's not it will not take so much time here.
Probably 20 or 30s depends on the Internet, speed and the.
Uh, server here.
And as you can see, it's a 42 here.
But if you want to do faster, you can add SN here after Nmap.
It will do much faster here.
The depend here probably five or 10s.
And here that's it.
And as you can see here, the remote hopes will have your location information next to the host and
IP address in the output here.
This is the geo location here.
And traceroute hop one, hop two.
So hop one, hop two and this is the traceroute here.
So we can also use the scan nmap here.
Here.
Let's actually scan me, scan me.nmap.org.
I think this was this the nmap scan me here.
Let me actually check that.
Scan me here.
Yes.
Scan me in.
Map.org it.
It's supposed to be that.
Now what we're going to do is we will scan the scan that map.org domain as well here, and then we will
press enter.
And as you can see here, it showed us two hops here.
So this is how it works.
The the traceroute geolocation.
And this script shows that your location coordinates of each hop from traceroute results.
So it depends on an external service from http.org plugin.com does not require an API key and has no
limitations on the number of allowed queries.
So.
So the script must be run in conjunction with traceroute because Nmap is actually in charge of generating
the traceroute information used by the script.
And here you may save the results in XML format and plot them in Google Maps or Google Earth later by
using trace or geolocation dot script argument as like that.
So we will we will not change the.
Uh, trace route here.
Oops, we actually didn't use the tracers here.
So now we are going to start it again because we had a little mis computer mis typing here.
So it's the same here.
Now what we're going to do is we will use the trace route script tracer geolocation, but after that,
before the target, but after the tracer geolocation script, we will add new script arguments here.
So script args here and it's going to be trace route dot geolocation, geolocation dot HTML file.
And after that you will enter the output file directory in this case home Cali here and my my file dot
HTML and after that you will enter here.
So we have the script arguments problem with script arguments because we trace route geolocation here.
So we will do a script arguments again.
That's it.
Now, here we have the file at.
My color, my files.
That here now.
You will see that right now.
And here we have it's not called typhoon here, so we need to change it.
My home.
Play the phone.
That's it.
And here, this is the file.
Now, as you can see, it's a 272 bytes.
And now we will open it.
Here we can right click on it and open with Mousepad.
As you can see here, we have several information here, so we will need to go to earth dot google.com
here or we can also use the another online service provider for this reader here.
So here.
Here.
Mail reader, email file reader here.
So here, as you can see, there's.
Also online websites you can upload this file to and just scan it.
And here we will roast your home and my file dot HTML.
That's it.
Now what we're going to see is.
As you can see here, this is our HTML here.
It's on the California state and.
Even on the map.
You can also download the sample emails here.
Here now.
We will upload our file again.
That's it.
As you can see here.
And if you open that file with a right click here, you will see this coordinates as well.
So you can use these coordinates here.
Even the map and so on.
So you can play with that as well.
Here.
As you can see here, there's also samples where you can use it here.
And so on.
So here this is how the Geolocation of Trees Road works.
So in summary and also remember, tracer geolocation provides valuable insight into the network path,
highlighting the geographic location of the hops involved so it can aid in identifying potential bottlenecks,
analyzing networks performance and investigating the geographical distribution of a network's infrastructure.
So in summary, this lecture explored the practical aspects of obtaining tracer geolocation information
using Nmap by utilizing the geolocation, tracer, geolocation and script in conjunction with a traceroute
option so we can map the network path and gather geolocation details for each hop.
So the script relies on an external service and allows for saving results in HTML format for visualization
purposes.
Incorporating tracer geolocation information enhances network analysis and provides a geographical perspective
to assist in understanding network topology and performance.
My name is Stefan and I'm waiting you in next lecture.