Original subtitles

The final tool is that they want to point to a section.

It's a very very important tool.

It's called Map and math.

It's one of the best scanning tool in any platform and it's built in.

Inside colonics but you can download the Windows version if you want and map that up.

But I wouldn't recommend that the Linux map.

It's quite effective.

And if you're not very good in memorizing switches minus as minus or minus B you can use a graphical

one so you have to open for using a map for scanning any victim using the command line which you can

start with and then using the

graphical interface.

So let's start by checking and map too.

So I'm going to open a terminal and map the command line first.

It's used.

You can use it by typing and map.

And then if you type minus minus help it will show you all the switches you can use.

And actually it's quite big.

And I'm going to add with the course description I'm gonna add some additional material to explain all

the switches and give you some example but let's take a small demonstration about and map identifying

the victim and let's see how to use it.

So I have here two victims.

Let me check them.

This one is Windows 8.

Check its IP CMG

and type IP config.

And the IP of this machine is 1 4 2 1 3 9 and I have another device another virtual machine.

It's a Windows XP machine.

And let's check

now the first thing we're going to try would be a common line xylem got to choose a graphic and I think

that graphical it's more powerful than a calm and light from my point of view is a common lens is a

powerful one in any tools but graphic it has a lot of feature and you don't need to memorize common

so I'm going to show you first how to scan any system to know the servers operating systems open pool

using ZCom and lines and then how to repeat that using the you of map.

So this is my XP machine.

I just need to get the IP of this machine

which is 1 9 2 and succeed 2 1 3 1.

Excellent.

So getting back to our question in the next.

And let's check both machines using Unmap.

So we're going to type first and map minus small as Zen Captain S which is the port and the service

opening port.

Zen minus capital and then you put the IP of the victims.

Let's try first Windows 8 1 2 1 3 9.

It's quite fun.

As a result of which that you can use you can use a switch that identify or specify a range of board

or the switch to scan a full network or some IP.

I mean that is a lot of switches.

But as I told you instead of memorizing or searching for help I'm going to repeat this step using a

graphical interface and you're going to see the result.

So I'm going to keep this one running and I'm going to put another terminal and scan Zazzle machine.

So to save time.

So here also I'm going to type and map my own as small as captain is minus capital.

And then 1 9 2 1 6 8 1 2 1 3 1.

Okay I think here we have a problem up to.

It was not able to get any single.

I'm not sure if IP is right or not that sleeping on the machine to make sure is that I think 1 9 2 1

6 8 1 2 1 3 9 it's not pinging.

Eyes I'm so sorry these IPs 1 4 2 1 3 9.

My mistake.

Sorry happen sometimes.

So let's clear the screen and comment one more time.

It's 1 4 2 1 4 2 2 3 9 and enter

while here it's not pinging on full is I'm sorry I'm sorry.

And Matt you didn't go one or two and he started in my opinion and need to change that as well because

it was one way for you.

So Also here is one for two.

And you should not take time.

And as you can see for the second machine he give us all the open port to see in the media upload how

to utilize this information to search for vulnerability and what servers are opening those port.

So this one is the Nexus One.

And if use net cut to connect to this port you will know which 10 that exactly is using or which I guess

is using which would be very useful for you in the meta deployed section searching for weaknesses in

those servers.

Also give us the MAC address of this machine.

This is you know useful if you need to do they are to attack like this or capture and he was able to

figure out that this is a virtual machine it's not a physical machine and operating system running on

this machine could be one of those super things.

And here we still have a problem I don't know why most of 1 4 2 1 3 9.

Let's check if we got the right IP here or not.

It's 1 4 2 1 3 9.

OK.

Seems that he was not able to scan Zealander's point one we're going to try to troubleshoot that.

But let's use a graphical way and see if he will be able to scan and get his results from that.

So let's use you for a map which is much more easier and give you much more information.

Open terminal and type Zenn man and man

and opens and map it will opens a graphical interface.

And here you just need two types I.P you could put one computer like this one 9 2 1 6 8 8 1 4 2 8 whatever

IP or you can put that 0 slash 24 which will scan the full letter getting all the computer on the network

and open port and service an operating system.

And the good thing about the maps that is showing you what comment we'll be using and you can say See

if you are aware of and maybe you can change on such switches but I'm going to keep the default and

Weakland going to click on scan.

Now this may take a time because I have like six machine.

So.

But as you can see it's fast but I want to show you what would be the output of his scans full network.

But I'm going to pause for a few seconds until we finish a few minutes because it's going to take time.

So it took a few minutes.

And as you can see and again it will bigger Bickersons that it will take more time.

It was able to discover all PC all the open port services the operating system everything on this machine.

But besides it and even the version of some of those services.

But besides that if you go here to typology he was able to figure out how this network is connected

and which machine it's more vulnerable than other machine.

So if you plan to compromise the network from which one should you start zoning green those are kind

of secure it will take time.

Well one is that this is very easy to compromise and usually is ruling the network that if you compromise

any computer inside the network it's quite easy to compromise that amount.

So if I can get access to this machine then there is some technique that can be used to compromise secure

one.

And one of the major one of those attack is call Pozza hash.