Welcome, welcome. Welcome, the section 9.
Hello folks and welcome back to
another section with this interesting. Queries. This
course is analyzing and we're talking about analyzing
and map and actually, I believe this
section answer. Lots of your questions and
make lots of things clear for you. So
let's hit the target. Well, in this
with you in this recording, I'm going to make something clear
for you. So maybe some of you know,
Understand when you get a result from him out. Are
you serious result? And some of them are open close filtered? So,
even wondered. Okay. What is the difference between, though?
So, I'm going to make these things clear for you to you
have a better understanding of the results when
you get a result from him, not when you doing this County. So,
let's go. Where's the poor
is their time? How do you to compare this data? And I'm going to talk about
what is the poorest sectors that we have their
of times, you might have used in my far from here to prepare winging it.
Network scanning orbit at it because your attacks or web server
attacks.
To numeration active Port Services of Target machine, but in
some scenarios, you don't get a simple message if
a port open or closed. But let's first,
talk about a simple things. For
example, we have an attacker that is our colleague, and we
have a Target, that could be a Windows. We are about
20 or another website. So the
status of a port or not do the essential properties. So
it depicts how and Maps sees them right
in nmap.
Airport is divided into Six States, exact
seek States. The first one that we
know I will love it is open, so that we import is
open. They stay is mean that an application on the target
machine is listening for a connection packet on a port. That's
good and we love it. And we need it. And the
second one is closed. This is State and this is
status means the port have notifications and
Gundam. Trudy could have open up any
time so
The target me don't have an SMB servers or I
don't know, another saves thing you want to attack. So it's
been closed. We have another set is called filtered.
This is State means that five
of our filter or other networks.
Obscure have this blocking the board that and
not cannot. Well the weather is open as closed. So.
But if facer filtered, if
there's a board we see that all
They not let us go and find out is open or closed. So
we get more creates. We do a lot
of other tricks is one of its is filtered or not
exactly what happened in the future in its open and close. The
for one is unfiltered Port are classified
as on trick shot when they are responsive to nmap
props, but Emma cannot determine whatever they
aren't open or closed. The next one, the
second one that's may
result of the open air filter.
Is that in this think he'd at the airport was
filtered or open but end up couldn't establish estate. So
may sometimes face to this is
that is that openness / filter will last.
We were sending that in the current stablished in the states.
The last one is closed
as / filtered. Same, as open /, referred
this indicate that Port has filtered or closed
but and not connect stablish mistake. So,
in open pores in
The first one that we talk, there will love it as well. Of
course you do, too.
In this case, a Seraph application running on a
port is actively accepting TCP or
UDP connection. We'd send TCP
packets report 18 of a target, for example, and
we find that the port is open. For example, let's go check
on another lap and see how the results coming
out for us. I'm right here on K. I'll
just going to header in map and set of for example portray team
that's stands for HTTP and
And for example, website is can mean document map.
Margie. That's in a provided for us to
your operation testing services and serious. So
as you can see here, we have a Portage in here that stand
for to CP and estate is open and
services actually before. Sure. And
on information that came up provide us that nothing is
not necessary in this video.
So we need to do that under the sellers that we
have here and map since
see packets on a poor, letting me talk about a
TCP scenes before if you remember that. And then, mmm
receive a semak packet as a response from Port
18, which generated support 18 is open and
then in map says our St packages, so
We talk about clothes purse. Let's talk about core sports and
see what happened. When we talk about close
ports and how it's going to show us. So for example,
for example, this time. I'm going to use
it on a diapers.
Well, this time, let's use it on.
Target in our Network on Windows 10, locators
therapy.
All right, and they 18 same as last one
and see that is closed. The
port you CP and estate is closed and services to
be Mac, address down a Wilmer.
For sure. Well, let's talk about it more. Cool
spots in these cases service or application on
a Portage axis will by no applications running on it. What
a port is closed is stated sends our state with
a packets when it's received TCP, syn packets.
Same as these comment, try
to scannable 18 for HTTP On
Target, but is closed.
Now we have used the as can send his apiece in
packets on importatn of the target machine and
found it hard to disclose their is because as soon as we
received a TCP syn packet, descends back to CBR is
Tea Act packet.
So, for example, there, if you want to do it, Tracer is
like this enough sense, seed packets
on a poor rating. Then in my receiver's the
egg packet as a response from poor 18, which
do not support 18 is got. So
this was a close one. Let's go with the filtered
one. For example, I'm going to do
Corner for this Sport
and again, scan me.
Daughter math, dot orgy and
weight. As you can see is filtered.
Our ports, our state answers.
In this case nmap is unable to determine Al Whatever is
port is open because the packet filtering in preventing the
packets from reaching the board. Or when
a packet is dropped and knepper tries several time
just in case the problem is well, whatever
drop you to the network conversions or rather
the filtering rectifiable, of
course, India biggest cat in a scan of
a lots of poets, or a heavy Network, and
reduce our
Time for scanning. So for example,
you can do this time for
the IP tables. If you want to use IP to draw
TCP packets, on a Target machine. This is not
include that occurs, but I'm just, you know, just a teep.
We're going to use IP table iptables, a firewall, or
the Linux systems. I'd be tabled a
shy, and we're going to put inputs through
for it, and a Dash p
Loops for the TCP.
A Mad Dash J to drop it.
I'm going to stay drop.
Okay, that's good. Now when we scan a
Target machine, the packet will be dropped as soon as it received
a few packets, but they both try it again.
Okay, so when we took at, if you run out
of water, shock your system to analyze it packets in for the networking and
insertions if they know what I'm talking about, but
I'm absent ecp's prepackaged. We got no reply from Target
machine. This means that package filtered or if
I want dropping our packet by the result will be the
same. So see other doses were scamming. Governor's
can and others information that we're
not going to use it for this video.
So you ask what about on fact reports? The unfiltered State
media report is accessible. But and
map is unable to determine ate. Whatever is opened or closed. Only
the academic scan which is used to end map by
to the map. Firewalls rulesets classify pours
into the state's the scanning on filter ports, a window, other scan
type such as a window, scan, CT scan or Fitness.
Can a famous can may help resolve. Whatever
the port is open. We use the IP tables to drop
in TCP packets coming into the port 18.
A Target machine, for example, I'm going to use the IP
tables. Again, use a dash all your inputs and
Dash p again for a TCP. For sure, andthey
will drop and
Port. That's going
to be in and dash. J
dash. And again, drop.
Gun drop it. Now when you use an
obscene scan to scan Target machine to
check. If there is any fire were all not going
to use, nmap Dash Y
dash P to do and
80.
Network sockets.
If I'm gonna write, all right.
Dave.
As we see in a given below comment,
Port without firewalls. She was unfiltered as
in. Map is unable to determine eyes open or closed.
So Alex Lee, can you open your water check and
see the port? 22, we got to rst packet, whereas in case the
polarity in the packet is dropped by Target machine.
So what is open filter parts in
case in Amazon able to terminate the portal when we filtered and
I said, has occurred for scan types, in
which open pores given no response, the lack of
response could also mean that the packet filter dropped the
probe up any or any response is
dedicated. So ml, but does not know
for sure. Whatever report is opened or being filtered sometimes,
but the European political sphere is null. Annex
mass is
And that I talked about it being, you know, previous sections just
can classify pork in this way. So for example,
Millstone El, mapa scan on an
ex my ex ex mass as can't use can Target machine, gun,
and map cache is a politics and
a quarter. A keen for sure.
The targets, okay.
Be use on open ports.
it's going to happen over and over, and
For example, sorry.
We need to your 2/8 as
we configure our IP tables, and
the talk about open and filters and close
filters steps. So,
let's have a summary. How video first, we have a
good grip on what's going on. Exactly spending the comments running the
common terminal. Talk about established at me
your Acura and Phase 2. It's the most of them are open closed and
filtered but in case you missed any more of
them.
Now, you know how, what's happening on what's exactly going on. But
usually you'll face it opens close, and filth reports. That's
now you complete and stand off the meaning
of them. In the next video. We're
going to talk about opening the circuit in the second
video of the section 9. Good luck.