Hi, and welcome back to the Deep, dive into National
assessments, by easy console. This is
section, 301 with network assessment.
In this video. You will learn how to Preferred Network
enumeration. So that's the iPhone 10.
Letterkenny mauritian, simply allows cybersecurity professionals
such as I think a lot has security researchers
even Network Security Professionals investors
to identify, whether
a tractor is able to extract sensitive
information from a who's machine.
Men, whose machines can leak
veers important details, such as
they are be cash to routing table. Say usernames,
password, policies Network. I
want to see a drive intermission, the airport.
It's really important to identify the security
vulnerabilities, quickly and Implement countermeasures.
So, let's take a dive in
using Kali Linux on identify by
using tools and techniques, any sort
of data leakage by performing Network
enumeration.
To get started. Let's open
our terminal.
So we can start by checking or IP address on on
that because usually I could do by patd are.
As you can see. I only eat
one of the Raptor and my network is 172
TT. 1.0 *
24 to 20 simply represents my
IP address to get started as
simple and my apps. Can I use to
do a map of C3 -
S capital c
on. This will perform a basic scripts can.
We'll do some networking numeration. Only
Target on all devices on our Network. Next,
we can't type all the target. Network switches.
Tootie. 1. 0, /
24, but to be
specific, I could suck on a specific who's on
my network.
Good answer. It's asking for
my collie password, granted one more time with answer
on. Now. We wait a couple of seconds.
What it will do is identify, Network Services
on perform basic Network enumeration
of each of these services to Frank sample.
If it detects. Let's a
FTP file transfer protocol. Will try
to get the information such as let's say,
for example, but it was able to log in and then I must lie
in the body inflammation and so on
through them or if it detects, SMBC, one
message block will try to enumerate division. Whether
it has any sort of security. What am
I able to determine if enormous? Login is
a v or not. So I'm going
to post a video on. When is this completed? We will
resume.
So disconsolate, a couple of
minutes to complete and this year's results so we
can see that have to be. So pain is able to
identify the FTP system. Is it windows and
TV is operating system. We have receipts
who skis but these are the simply public information.
We also cport 82.4 h e p,
t h e, r b metal out of risks trees. So there
may be some potential issues here
for the attack mice,
girls running. So which means of fatalism is
qld to be us on this target system.
Is able to enumerate Suites in Flagstaff and capabilities,
which me, Aloha try to set you
a shocking to me, Sean as well.
Queen afua, let's see what we
get. We have some additional Services organization
name, but look
at is on the whole script results. We
have a lot of, for some details, we get
a netbios name, which is pretty much a computer named week
at the MAC address, which is expected. We
get our operating system, low pressure system version
suits Pack level the type of
operating system to be very specific, Microsoft Windows Server,
2008 to spark one. It's only
Wood Group not to do me and we even
get a SMB security modes, which
is super amazing. We also get SMB security
mod version as well. To It's actually
an evil but not require such means
of saving me, be able to extract well to
put somebody we may be able to review the contents of
the network shares and perhaps download.
Content content with this target system.
You simply want to be
too and SMB security mode without having to run all
the scripts, we can use that mask thing engine
on a map.
I specified scripts. Do you want to use?
Define sample, we can see SMB -
security mood and
then specify a Target. So in
my lab, it's 17281. 21
and rainbow, only perform these
scans on systems that you own and that
you have legal to Mission to do so, so I don't have to answer and it
should take a few seconds to complete.
I'm currently we have
a problem is saying that. Okay. This system seems to be down
try using - PN /
ride. Parmenter.
I'm currently it's detecting of all the
portafilter which is pretty strange actually. So
if you see, all portafilter that, it simply means that
he has some type of firewall on the actual Target
device. All right, so I'm going to try this one more time. Let's
see if it works.
Okay, this time it actually worked so it
did not give us the
actual security mode. Are you we were looking for
however, if you have done the regular one,
which is -, Nescafe,
Dulce security actually, that's
okay. At least we got it from using Dash,
as capital see if we
could use his right. Actually enumerate the use of space.
So let's do
pseudo and mop - - script than
SM, be enough.
Dashes on Spotify.
Get once more.
This should take a few minutes so I
can complete the tax refunds. Come very, very fast. So we
got all the portals open as expected
and look at it. So it actually show us all
the shares are available on the system. So
guess, Armand, signed as
a seat assigned as a y p, c shares. However,
you look at it. So
do use our access denied.
Another anonymous access is
none. But this particular Chasez read
to, which means to save may
be able to talk to you read information from this
particular chair.
During the course of this video, you take a look at understanding
the concepts of performing in numeration to see
how to use various tools and techniques to perform enumeration on. Who's
with an internet, with an X with
you. We'll take a look at working with open source intelligence for gathering
information using passive techniques. I hope
this video has been a phone two for you and I
will see you in the next one.