Original subtitles

All right.

So before we go into the OSA model I do want to talk about some common ports and protocols since this

is a refresher most of these should be pretty familiar to you.

I'm going to run through them pretty quickly and just talk about them briefly on each of these common

ports.

And the reason I've listed these is because they are things that we'll see quite often as a penetration

tester.

And it's just something that as we're going through the course if one of these show up it's something

that just rings a bell and you see you see a scan it comes back and you see Port 21 you think I guess

FCP or you see for 80 you think I guess a GP.

So you've got to start training your mind to memorize these ports.

So when we get into our scanning which again we haven't covered scanning but when we get there and we

see what ports are open on a machine we're gonna be able to have these common ports memorized.

So on the TPP side we've got FCP FCP is the file transfer protocol.

You're going to see this in some assessments you're going to see this a lot when we do something called

Capture the Flag.

We run through some test machines you'll see FCP open quite a bit.

So FCP file transfer protocol all that means is we can log into the server.

We can put a file or we can get a file off the server.

Now SSA and telnet kind of play hand in hand telnet is the ability to log into a machine remotely.

Now SSA does the same thing.

The only difference is SS age is the encrypted version of that.

So it tells that you are in clear text and with SSA age you are encrypted now S.M. T.P. POP 3 And I

map all relate to mail.

We're not gonna worry too much about mail in this course.

But you might see it come back up at some point.

So just remember your twenty five one ten and one forty three DNS.

So DNS is a way to resolve IP addresses to names and we could take a quick look at that.

If we go back to our Kelly machine and say we're at Google here we've got Google up.

But the computer doesn't really know what Google is the computer is just using nice text like Google

dot com for us the humans.

What's going on on the back end is Google actually resolves to an IP address.

Now the IP address is how the computer knows to get back and forth because we don't want to sit there

and type in IP addresses this DNS or domain name system has been implemented for us.

So we typed in Google dot com on the back end IT knows hey I want to go out to 1 7 1 7 9 10 20 to 30

for whatever is in reality but this is just a quick way for the computer to relate to a human and the

human to you know have easily readable access to some of this stuff.

So going back to our PowerPoint we have HP and HP yes that is a Web site just what you saw there.

Mostly everything is on for three now or HP yes the HP port 80 you'll see sometimes.

Remember that is the non secure version of the protocol.

So HP is encrypted HP is not encrypted and not secure.

So lastly SMB ports one thirty nine and four forty five.

Originally it was just one thirty nine in the later versions of Windows they put on for four or five

you're going to see these ports a lot.

This is probably the most common port you're going to see as a pen tester.

These relate to file share as you might also hear this called samba.

So there are a few names for it but when you think of SMB and you see one thirty nine or forty five

think of file shares and as a pin tester perspective you got to think about all the crazy exploits we've

had regarding SMB.

The most recent one as of this course was the one to cry virus.

Right.

So you had the want to cry virus is also known as Eternal Blue was what it was built off of or M.S.

17 0 1 0 was the official term of that exploit that exploit utilized and SMB exploit to navigate through

networks.

So it became very vicious very quick because S&P is open so frequently on networks.

Now on the UDP side we also have DNS over here.

DNS is both ATP and UDP protocol.

We also have DHS BP now when it comes to IP addresses.

DHS GP associates you with an IP address kind of at random.

Now you could have the opposite of that is what is a static IP address.

So with DCP you plug into your network say your home network and the Internet just fires up.

Guess what.

Probably DHS VPN the back end it just picks a number between arrange says Hey here's your IP address.

I'm going to let you lease that out for eight hours or a day or a week or however long the timing is

set for it.

And that IP address is yours.

Now the opposite of that again is static so you could say hey I want a static IP address and anytime

I plug in with this specific computer.

Go ahead and give it this IP address.

So how are we going to know that.

Most likely the MAC address.

Right.

So from layer two it's gonna know layer three and how to assign it.

So again DCP should be pretty familiar to you.

We've also got TFT APM port sixty nine which is the trivial FTB and utilizes UDP instead of TPP.

And we also have SMP which is the simple network management protocol.

So you will encounter as an MP occasionally on networks not always but when we do encounter it there

may be some information to be gathered especially if there are strings being used that are community

or public strings.

And we'll worry about that when we encounter it.

But you will probably see it again in this course.

So that is it in this video we're going to go ahead and move on to the OSCE model and tie all this together

then we'll get into a little bit submitting and we'll end this with a refresher on networking a final

final video on networking.

So I'll see you over in the next video.