1
00:00:00,630 --> 00:00:09,720
So we have seen how we can perform scanning to detect live host in a network or live ports and services

2
00:00:09,720 --> 00:00:14,130
in our target PC or topology.

3
00:00:14,310 --> 00:00:19,260
Now we will see how to perform operating system fingerprinting.

4
00:00:19,830 --> 00:00:22,200
So what is operating system fingerprinting?

5
00:00:22,380 --> 00:00:30,390
Well, it means trying to detect the operating system running in our target machine.

6
00:00:31,200 --> 00:00:37,350
So let's see how we can discover that which of operating system is running in our target machine.

7
00:00:37,380 --> 00:00:41,160
So first of all, let's switch to Kali and let's open the terminal.

8
00:00:43,980 --> 00:00:46,520
Now, let's say our target is Metasploit.

9
00:00:48,390 --> 00:00:54,030
So let's check its IP ten ..2.5.

10
00:00:56,720 --> 00:00:59,300
So we will use map for this as well.

11
00:00:59,330 --> 00:01:03,770
Hyphens, small s and capitals for scan and same.

12
00:01:04,530 --> 00:01:04,980
Okay.

13
00:01:05,860 --> 00:01:08,800
Now hyphen capital O.

14
00:01:08,830 --> 00:01:12,160
For fingerprinting to detect operating system.

15
00:01:12,160 --> 00:01:19,450
So that element will scan for the operating system and then the IP of the target machine.

16
00:01:19,720 --> 00:01:20,350
Right.

17
00:01:20,350 --> 00:01:21,970
That is Metasploit table.

18
00:01:23,050 --> 00:01:28,750
Now in my strategy scanning process and let's see whether it detects the correct operating system or

19
00:01:28,750 --> 00:01:29,290
not.

20
00:01:34,190 --> 00:01:39,590
So we have to wait until MF finishes its canning process completely.

21
00:01:43,260 --> 00:01:44,900
So the process has been completed.

22
00:01:44,910 --> 00:01:51,180
It has mentioned that this number of codes are open and yes, it detects the operating system.

23
00:01:51,180 --> 00:01:54,510
It says it's running Linux 2.6.

24
00:01:55,200 --> 00:02:04,050
So yes, is Metasploit able to actually work on Linux 2.6 platform so it says is detection performed

25
00:02:04,890 --> 00:02:15,720
right one host up and total scan time is this much so around 22 seconds so yes it's actually works.

26
00:02:15,720 --> 00:02:16,290
Okay.

27
00:02:16,680 --> 00:02:18,870
Now let's see the Xen map.

28
00:02:18,870 --> 00:02:25,860
Okay, so let's switch to the windows and let's see whether Zen may perform its functions well or not.

29
00:02:26,820 --> 00:02:32,850
So let's open the Xen map and here mentioned the target IP.

30
00:02:32,850 --> 00:02:36,930
So suppose in this case I am targeting my host machine.

31
00:02:37,950 --> 00:02:45,480
And now here let's edit the command to this one.

32
00:02:47,670 --> 00:02:49,500
Now click on scan.

33
00:02:50,430 --> 00:02:56,490
So end map has started scanning and we are running the latest version of End Map.

34
00:02:56,490 --> 00:02:58,800
That is 7.70.

35
00:03:05,190 --> 00:03:10,550
And here is the output and it is a little bit confusing.

36
00:03:11,490 --> 00:03:17,430
I think this may be because I have turned on all of my securities like Firewall and Windows Defender.

37
00:03:18,450 --> 00:03:25,080
So it says Microsoft, Windows, Longhorn, Windows ten, then Windows ten, then Server 2008, then

38
00:03:25,080 --> 00:03:27,960
Windows eight, then Windows ten, then Windows ten.

39
00:03:28,820 --> 00:03:29,060
Okay.

40
00:03:29,130 --> 00:03:31,890
So it's a confusing result.

41
00:03:32,520 --> 00:03:35,100
I think this is because of the security, right?

42
00:03:38,090 --> 00:03:43,520
See it says 94% accuracy for Microsoft, Windows, Longhorn.

43
00:03:44,620 --> 00:03:51,740
Okay, so this is how we can perform basic operating system fingerprinting, either using DN, mapping

44
00:03:51,740 --> 00:03:54,560
Kali or by using Zen map in Windows.