All right.
Good afternoon.
We are going to mess around with dough today.
Kind of a precursor.
The very first thing I need to realize is that dough is a command line interface tool, which means
I need to open up a terminal and blow that up for you.
And let's just get a sense of nishto.
Nishto is nicto.
I'm going to do a dash h or a tac h that's going to give me this basic manual of how to perform different
attacks.
I really don't want to say attacks.
Attacks is a wrong word.
Uh, we're going to do some different scans against the, uh, server that I've got in my virtual system.
So I am currently running a, uh, Archaeopteryx two system in the background, which my tally box is,
has direct access to.
Right.
So we already did the scan.
We've already identified the IP address for this specific machine.
So now we just need to run Nicto against it to find some vulnerabilities So the very first thing I want
to do is I want to do an nicto dash h, and I need to hit the IP address.
In my case, it's ten .0.2.5.
I want to remind you this IP address could be different depending on how you have your network set up,
depending on what you scanned for that Archaeopteryx machine.
So be aware of that IP address.
You need to scan for it.
I'm gonna hit enter and it's going to give me some basic information.
It's going to say hey here's the target IP address.
Here's the hostname operating on port 80.
The time that I did the scan.
And it's going to say it's running Apache right there.
It's removed and it's seen a little bit.
It's seen a little bit of problems.
Right.
It sees anti clickjacking is not there.
And it's going through and it's just looking for different aspects or different vulnerabilities that
it might find.
And it's just going to continue to run in the background until it's found everything or until it's completed
its scan.
We can see here that PHP reveals potentially sensitive information, so on and so forth.
Right.
And we can start to see the Apache default file bound, which is not good.
So it provided me with all these different items.
And when it's done it says that it reported 17 items and it had one error.
If you scroll up you can see the error right there.
Right.
So that's just checking out that I want to show you one other scan.
Right.
We're going to do a Nicto.
Nicto.
And then again that dash eight the IP address like so.
But then we're going to do a basic scan for SSL.
We want to look for SSL vulnerabilities.
So I'm going to hit that little tack right there.
Hit enter.
And now it's going to start scanning for SSL vulnerabilities.
And it's going to do pretty much the same thing it did before.
Except now we've said hey I want you to concentrate specifically on those SSL vulnerabilities okay.
So it's going to go through and continue scanning.
I also want to point out that it changed its port when I did SSL, it went from port 80, which is http
over to port 443, which is Https.
And there's a reason for that, right?
The SSL points out that, hey, I'm looking specifically for that Https point.
However, we are seeing a lot of the same errors as before, right?
Anti Clickjacking not present uses TLS strict transport layer not defined.
That's an issue we're seeing.
Content type header is not set.
That's a problem.
All right.
So that is Nicto in a nutshell.
Feel free to uh mess around with it.
The best way to learn these tools, all these tools we're showing you the best way to learn it is to
actually mess around with them, start diving into it, use those virtual machines and learn these tools.
Uh, that's the best way to get a good handle on what you're doing, how the tool works, and how it
interfaces with you as a security analyst are going to be dealing with in the future.
I hope this helps and we'll see you next time.