Hi, and welcome back to the Deep dive into
Network. Assessments, by AC console. This
is section tree. Hands-On with
network Assessments in this video will be
exploring fears, icmp proven techniques into
a
Carlos machine, to get a better understanding on how
we could use a map to perform. Of course,
various icmp, proven techniques
against a Target. So currently,
we are on Kali Linux. Let's open all
to know. I just want me to so
little bigger for you to see.
Are, there you go. So whenever
we are connected to a network, one of the first things you want
to do is an IP addr Command
to verify, what network are
you connected to? Sue? For example, on my
ethernet one in the face and committed
to the 172 to 81. 0 /,
24 Network. However, the 20
is, my actual IP address. So the
number of devices which
are currently on my next week. Could I play, can
you send map to specify my
network switches 17231. 0/24,
internal
What is going to happen? Here is my
business,. My entire network show me
all the devices which are online and
determine which Porsche over
which Porsche clothes. Are there any services this
thing about using and mop and let
me screw up just a little bit when you
use and mop as it is a Michael
perform a teaching to all devices within
a subnet. If it device response than
it will perform a scan on that specific
device. For example, we can see that
one 7 to 3:31. The 21 is
online which means to say that. 21
responded to our icmp or
ping message from and map then a map.
Check the top 1000 ports on this
target determine which was open and
which door to close, however, by default,
whatever and microphone to scan and Maple.
At least anything. However, there
are various options available when using a
map to see his options. We can
simply type a map and hit
enter once and here we have a lot
of other options available where we can use
with an end map.
So, starting from the top, we have some beers examples.
We have whose Discovery but take
a look at is we have various icmp
Echo to get a timestamp
on the mosque. Request Discovery
proves. We can even try out a couple of
days, but just as an additional piece of information, you
can see all the different parameters that
can be used and map by simply typing
and map on pressing enter. And you'll
see all the options available.
So, let's take a look out of foods. Icmp.
Equipping to perform this weekend. See,
and mop, then we can do. Capital
P, capital, l e then specify the
entire network range
or particular. So
that's to 21 and
it answer.
With this attack. She performs an
icmp are coping on this specific device, only
the cool thing that performs a general thing
and if the device response, which
is the 21 then and mopol actually
perform.
Iskcon on this host. So
as you can see, the sky is really be sick and
we still get all the open ports,
while to 1422 listed under the
top 1,000 for Andy services.
However, what is Lexi retarded?
Who's has the icmp responses
the Civil than if
you try performing thing on that device will knock
out the responsible. Thing. Who's device is offline?
We can use another part of matter which
is a mop Dash capital P.
Capital p a little perform, something known
as an icmp time-stamping. What it'll
do. It is actually configured to
determine what is system is online
and more specifically.
Many files actually configure to restrict or
block icmp, Echo request. However, by
using the dash capital P, capital P, son
talk. So pyromancer, we may be able
to determine whether a horse is available or
not. Because sometime the contributions on
the fire will mean not be done properly. So let's
actually send a message to Luis and
see what happens. So, I'm doing
one 7 to 2:31, the 21.
And we got a little message show. It says you're
not route. So that's actually
use sudo in front of a command just
to ensure our come on with musically.
So handsome, iCarly password content
of one small.
And there you go. It's actually performing an icmp
timestamp come out. Well, scan
that has Siri.
So let's say, for example of you scan the 21
initially without the dash pee, pee,.
And well, it is a firewall firewall. Would
most likely most likely
actually blocked, icmp. Echo, request on
Wu-Tang. The horses are fine. However, since
rosemere have this rule
configured properly, then you
send the. Peepee. Come on like as we
did here, will bypass a restriction on help us
determine whether this was online or offline.
If this doesn't work out
is another techniques you can use which performs hour
equal icmp address. Masking
is a special type of thing on. This
is used as an alternative to talk.
Dirty to Me On whether icmp messages.
Are you able to pass through a firewall that missing
to be considered to be blocking Echo
request from that sell taco?
Machine to perform this song again. Let's use
pseudo, just to be seasoned. Will do.
Capital P. Capital M
followed by Target. So
again, I will talk. It could even be a firewall
always system that has if I work on it. So
once more we can see we
are able to determine this house is online with these
open ports, and they're
running services.
And lastly, we can do an IP protocol thing.
To perform this type of things. Can I ask
where is one small next? To pseudo and
mop. Capital P capital, O,
followed by our Target. I
be in this case. My target is
172 281 the 21. I'm go
ahead. Answer.
As you can see, we got results. Saudis are
various ways. These are various methods to
use of various techniques, which can be used if
it is, lets see who survives, what is
a firewall, when it's a router contain, any sort
of security rules Access Control list,
that may be restricting, icmp messages
from being processed. In this
video you discovered how to perform various icmp,
proven techniques using and map
on Kali Linux.
Play the next video will take a look at understanding, evasion
techniques. I hope this
video has been informative for you and I will see you
in the next one.