Original subtitles

1

Lemon I'll show you another tool if you remember the tools in Cali are listed under the Applications

2

menu and in applications the tools are grouped by category information gathering vulnerability analysis

3

and so on.

4

In the information gathering we've already seen the net discover tool and the map tool.

5

Now we're going to have a look at these and map tool.

6

You could either started from the graphical menu or you started from the command line then map as basically

7

and map sister or brother which is the graphical and map really.

8

Once you start it all you need to do is type in the IP address and then it automatically populates the

9

command that is going to run.

10

And as you can see here this is a very similar command to the one that we ran earlier on the command

11

interface.

12

The good thing here though is that from this dropdown menu you can change the options.

13

So if I choose and then scan all ATC reports notice what happens on the left hand side it automatically

14

populates the command to scan all ports from 1 to 6 5 5 3 5.

15

It's still at timing 4 and the minus option that we talked about and the minus v option.

16

We also talked about.

17

And as you can see here there are multiple different options that you can pick and choose from.

18

So I'm going to remove the full port range from here just to keep it quick because we've already seen

19

the scan output and I'm going to hit scan Now notice the difference because I'm not scanning every single

20

port and map and this case scans 1000 ports only 1000 points from more than 65000 ports.

21

So that's a big difference.

22

However you might not notice a big difference in the results because these are the most common and 1000

23

Bortz.

24

So it's very likely that the machine that we're targeting will have the services running on it belonging

25

to one of these 1000 ports now that the port scan is done again and map is doing the additional scans

26

the script scanning the Vonda that it is scanning and so on which we talk about in more detail and the

27

advanced courses and the scan is complete.

28

You know the see at how much faster the scan was.

29

Now the nice thing about Zenn map is that visually it's much more comfortable.

30

You can immediately see here that the ports open are colored in green.

31

If we had more than hosta scan on the left side we can group the output by the operating system or by

32

the IP addresses on the right hand side we have multiple tabs that we can go through and that makes

33

things much easier to look at if we click on the ports that we can see immediately in a very beautiful

34

summary.

35

All the ports that are open and this is very important information to us because your job as an ethical

36

hacker or as a penetration test that your job is to investigate each and every single one of these sports

37

and the services running behind them to see if there's any vulnerabilities that are existing and then

38

to try and exploit these vulnerabilities.

39

So this gives us a very nice summary or sort of a checklist of what boys exist on the target machine.

40

And as we progress through these videos it's going to be seeing how we work our way through these boards

41

not all of them obviously because that will be an entire five hour course on its own.

42

However sequentially I'm going to pick and choose some of these sports and show you how to use them

43

to break into the target machine.

44

And this is the tab that shows you the network topology that you're scanning over how the network that

45

you're scanning is organized or designed.

46

And because we have one target the network looks fairly simple so this is me the local host and immediately

47

connected to me is the target machine.

48

Then you have the host details which is a very high level summary of the host.

49

So you can see here that the host is up and has 23 open ports.

50

This is the operating system that got detected and how it got detected.

51

Again these are things that we talk about in more advanced courses that don't worry too much about that

52

for now.

53

And lastly we have the summary of the scan or the command that we did to run the scan.

54

And by the way if you want you can save the scan of Vesely so you can come back to it later.

55

Anytime you want.

56

Now that we have the details scan output we can start to target the services running on the machine

57

and the next video we're going to be hacking our first service and getting access to our target.