So look at the page scene in the slide, this is the manual page of the Mac of Command.
Markov is a command line tool, mainly used to flood the switch on a local network with random addresses.
So as I mentioned before, when the switch receives a frame, it creates a new entry in its Mac address
table for these Mac addresses.
Once the switch is Mac address table is full and it cannot save any more Mac addresses, it generally
enters into a fail open mode and it starts behaving like a network hub.
So let's see Makk of command in action.
So here's a network that I created in Genesis three.
Well, the IP addresses are different from the one that I created in the previous lectures, but not
to worry, it's completely identical with that network.
So in addition, I've added some other VMware VMS, a WASP broken Web applications and US voidable in
the same way with Colly, not just a little word of caution while you're adding a VMware VM to Ginés
three network.
Do not forget to create a new custom network mode such as Vernette two because all VMS need a separate
custom network moag.
Remember that.
OK, so now go to college.
Since college is a part of the Jeunesse three network, it's network settings is custom, so it's not
in that mode right now.
Have a look at the IP address using if config.
OK, so it's in one nine two one six eight one zero zero twenty four IP block.
So now check the entire network, I go over to the other teams and look at the interface configurations,
these are the IP addresses of all the VMS.
Now go to college and ping them.
The results are pretty good.
We got the reply packets for ping request.
So now I open another terminal screen and scan these two VMS and see the open ports and running services.
So I'll simply use the Inmet command with the IP address only, so it'll be a skin scan and the top
1000 ports will be scanned.
Here are the results.
10.1 one has nine open ports and 10.1 two has 23.
And as you see here, telnet port of the one nine two to one six eight, that one zero eight one two
is open.
So let's go to the VMS.
Dengue 12 is metastable and ten point eleven is a waspy way.
Now we know the telnet service is running on Métis, Floyd, so to create some traffic and let the switch
fill the Mac address table, I'll start up a telnet connection from a speedway to meet exploitable.
Type Telnet and the IP address of Madison Voidable enter the username and password, which are already
given, is a welcome message here.
And we got the session.
OK, so we can exit now.
Now we'll go to the console of the switch and type show Mac address table dynamic to see the dynamic
records of the Mac address table.
Now, here there are six Port and Mac mappings for now.
Run the command again, and now we have two rows.
So it seems by the look at this that the Mac address table aging is 10 or 15 seconds.
OK, you ready for this?
This is the time of Mac Fleming.
So now I'm in a terminal screen on Colly.
Have a look at the manual of Mackoff of Command first, so type man Mackoff and hit enter.
Mack of is a tool that's used to flood the local network with random addresses.
And here are the options.
I to identify the network interface, to attack and to specify the number of packets to send D to specify
the destination systems IP address.
So let's create the command.
Of course, the first command I'll send is Mackoff.
I the interface it's used to attack will type that in as zero d the destination, the ether switch router.
Now we're ready to run a command, so hit enter.
And the Mac flood started and up sends tens of packets in seconds.
Now, let me go to the either switch router console and look at the dynamic Mac address table again,
you can call the last command by using the up Ruki.
And as you see, there are a lot of rows for our fast Ethernet one zero port, which is used for Colly.
So while Mackoff is running, let's run Wireshark and try to listen in to the traffic on the telnet,
that of Carly's own network interface.
Now, to see only the telnet traffic type telnet in the filter box and click the blue button next to
the box.
OK, no telnet traffic for now.
Now go back to the OAS, BW, AVM and Telnet to the medicine Bloy VM again telnet the IP address of
voidable username and password.
Run command.
OK, so back to Carly.
You see the telnet traffic here.
Collie is neither the source of the traffic nor the destination it receives betelnut traffic.
Now, this is a typical in her behavior to send packets to each node so we can say that our switch is
behaving like a hub now, just like we predicted.
So let's go ahead and stop Wireshark and the lack of command using control sickies, you can do that.
These are the telnet packets, since Telnet is a clear text protocol, by default, we can see the payload
as well as the metadata.
We can see every character in a different packet, so select one of them, right, click, follow and
select TCP stream.
So the right characters here are client packets, the blue characters are the server packets, here's
a credential username and password.