Original subtitles

So I want to show you some additional scanning tools that we can use especially other opportunities

and options you might have out there that you might like more.

And I'm going to show you a tool in this video called mass scan.

We'll show how to scan with medicinally.

And then last couple of videos will be on Nexus and I think nexus is super important to show because

it is a tool you will use in your career.

And it's a must have in terms of knowledge.

So we're going to be using a tool called mass scan a mass scan was actually built to scan the entire

Internet really fast.

So it's a really fast port scanner.

And if you want to read about it.

Robert.

David Graham here at get hub has mass scan.

You're more than welcome to come through here and look at the usage and different syntax and even how

to scan the entire Internet.

Though I do not recommend this because you will have people knocking at your door pretty quick.

So let's minimize this.

And I will make this an attachment as a resource in case you're interested or you could just google

Robert David Graham.

So mass skin is actually built in you to start typing mass scan and then you hit tab.

And what we're going to do is we're going to just do a regular old scan here.

So this scan is going to look something like this.

We're going to save port like this and we're just going to specify one through sixty five five thirty

five OK.

And we can choose a rate of how fast we want to go.

We also need to pick you know what IP we want to scan.

So we're going to go ahead and just scan 1 9 2 1 6 8 5 7 1 thirty nine.

Sorry.

One thirty four.

And we're going to hit enter on this in one second.

First I want to set up and map as well.

Let's do the end map syntax from memory if you can.

So we're going to do T4 again for speed dash P dash and we're going to leave off the dash a.

All right.

And we're just going to say same thing 1 9 2 1 6 8 5 7 dot 1 3 4 and then we're going to run this here

and I'm going to run both at the same time and I just want to do this for the sole purpose of doing

a speed scan and seeing how fast one is compared to the other.

So you can see here too that we have forced options.

We've got the dash little ass big ass.

Now this should look like very familiar syntax right.

This is that stealth scanning room of the stealth scan we go out and we say hey I want to kick to you

sin.

And they say yeah to me Sinek and then we say not just kidding.

Reset.

Right.

So this is what it's doing it's doing this dash P capital P lowercase n if you remember from the end

that video.

This means treat everything as if it is a live.

And then the rest we don't really have to worry about the settings but these are some similar and map

options though not fully.

So we do have to specify the ports here and this is running and you see this one actually finished first.

So in this race and this is something that I want to point out too.

This one's going actually pretty slow and it could be because we're not giving it enough threads so

I'm a control C one more time here and we're gonna try this with something like dash dash rate of 1000

thousand and see how much faster it goes.

And you can see now the time is significantly less.

So the rate is important and the nice thing about it too is typically when it finds a port it tells

you about it see if out of port it tells you about it.

So a lot of people like to run mass scan for the purpose of running it and getting quick results because

now they can say hey four four threes open.

I'm going to go out there and I'm going to go try to look at it while the rest of these results are

coming through and it's finding 30 to 768 which didn't even know is open.

But anyway.

So OK we've got thirty two seven sixty eight which didn't show the first time did show the first time

actually as RTC.

So we're looking at these results and I want to go back and backtrack just a little bit here.

So remember in the first video where I said we didn't have to do the dash a right away.

This finished in five point six seven seconds which is pretty good.

Sometimes mass gain is faster sometimes Cally is faster and that is faster here.

And we've got one two three four five six ports open now strategy might say that instead of scanning

like this where we say dash a 1 9 2 1 6 8 5 7 1 thirty four instead we say let's scan like this and

then when we find out what we have we could say 20 to 80 111 130 9 4 4 3 and this 3 2 768 and then run

that and instead of going out to every port trying to make that connection scanning with all we're only

going to scan the ports that come back and this tiered scanning or this phased or stage scanning is

a lot faster.

Now again I've told you my preference my preference is just to add the dash and let it fly and then

I'll go do other things but scanning but if you're in a competition or you need something to go fast

or you're just like in a time crunch.

This isn't a bad way to do it either you could actually script this out to do this for you.

So again we're still finishing here we've got six seconds left and it's found all the same ports granted

in a different order but it didn't find it as fast.

So your mileage may vary.

I've had times where any map has taken me an hour in Wall and map is going.

I just go out and I say hey mass scan go ahead and scan everything for me.

I want to know what's up.

And in this instance when we're actually scanning against a host inside of our network it's a little

bit quicker a little bit easier.

So this is just an introduction into another tool something to get your self familiarized with with

other options that are out there and we'll look at a couple more options and we'll be on the exploitation.

So I'll see you over in the next video.