Active information gathering with Metasploit scanning is an active information gathering technique,
each which in which we will now start dealing with the target directly.
So port scanning is an interesting process of information gathering, so it involves a deeper search
of the target machine.
But science active for scanning involves reaching out to the target systems.
These activities can be detected by firewalls and intrusion preventing systems.
So there are a variety of scanners available to us within the Metasploit Framework to allow A. to properly
enumerate and the trigger systems to list all the available ports.
Airports can mid-Wales.
You can use the search command like that, for example, search ports, scout ops.
We have to start Metasploit first immersive console.
And then, uh, use search command to search Potiskum go.
Unless you can see we have a serious here that's going to support.
So we will use TPM ports, guns so we can start by doing a basic thesepeople scan within the TCP, ports
can actually remodel.
So, uh, see what we can find sensitive zipper ports can.
That actually model doesn't need administrative privileges on the source machine.
It can be extremely useful when piloting saw to run the DC ports are going to result in axillary module.
We need to set them up, uh, our host to get to a target range of here.
So now, actually, now I will start our year of.
Sure, let's set the resolution a bit higher resolution.
Yes.
This configuration here and then.
Yes.
So.
Now I will of I will open our target machine.
This is Metasploit about here.
Uh, this is just an exploitable Linux machine for, uh, penetration testing here.
Uh, so let's open it.
Uh, Metasploit about.
And I think this is it's ingenious name Metasploit able.
Here and play.
Yes.
And it's the Windows Capture Window Capture, Metasploit Tumble.
Support very much trying to.
Yes, this is our greatest political machine here.
Properties automatic windows on this Metasploit A.
That's decrease the size a little bit.
So I will look in here.
Actually, they are in the, uh, same net network here, so, uh, emissive admin and admin and password
this massive item in here.
Oh.
You can see here.
Then we will use.
Let's open up the next machine here now, and we will use axillary that scans Typekit port, so uh,
actually he has to A.C. proportionate.
As you can see, there's a description here, so use a auxiliary scanner, UM port scan or scan and
ECP it you can see here with, uh, used it and we have to set some properties to it.
So as you can see here, uh, options start.
So the concurrency, this isn't the number of concurrent ports to check per host delay.
The delay between connections pushed through in milliseconds.
So how much your delay is, the much, uh, your, uh, scan will not be less noticeable.
So now we have thread the number of concurrent threads max run per host and time out, and we have rehearsed
so we can determine the source, uh, here, as you can see here.
So we will edit our hosts here.
So the set up costs.
So as you know, we opened our, uh, machine.
Um, we opened our Metasploit, uh, virtual machine in the same network.
So carry the main exploitable is on the same network.
So let's let's uh, well, let's see what um is our uh, lan ip IP actually ifconfig ifconfig.
And as you can see it here.
So now, uh, then uh, we will enter, uh, here, our IP here.
Yes.
And zero, 24, because as you can see here, this is three times 255 and because this is 24, so we
will search only these changeable eyepiece.
So I appear engines zero to 24 broadcast here, as you can see political stripes here.
So now we will set the threads 200 cent rates, who said threads?
Uh, two hundred.
Upstart's, thanks a lot.
And let's see what we have done.
Three hundred and Typekit and just, uh, from zero to 255 55.
And um, so now, uh, we can start here.
So.
All right.
Hillary is running, no.
It might take some time, but we are.
We increased our threats here.
As you can see here, we found some more compounds in this IP address.
And as you can see, three three eight nine is open uh, seven five eight zero is open.
And this may take some time for it to find open ports.
Uh, which is axillary, but there is a bairstow's such as, uh, any map to find open ports, uh,
faster than this.