Hi on, Welcome to the Deep dive into Network, assassin.
Lance bicycle in Seoul. This is
section 301 with network. Assessments
in this video will take a look
at understanding common evasion. Techniques are
used during scanning when performed
by a penetration tester on attic Oaxaca. So
that's so probably wondering
why what do you need to re-read to put
simply when performing? Let's see.
Erica Hocking, boyfriend penetration, testing, the security
professional, who's conducting? These tests
need to ensure that their talks and
not detectable by the organization's. Let's
see. Security solution. Security appliances
to put simply the
purpose of performing at the Go. Hawking on patient testing.
It is to Simply identify any
sort of security vulnerabilities within your
organization and the assets and try
to remediate or Implement some type of
countermeasures or even mitigation techniques to
prevent a real side of attack from a current. When
performing. Let's see scanning and even
creating some type of malicious people. Do you
have Fierce techniques and tools which
can be used to reduce the risk of detection. In
this video will take a look specifically
at reducing the risk of
infection while performing scarring.
So, let's divernon and take
a look at using Kali Linux on a map to
evade detection and carry decoys.
So currently this is my Kali Linux machine and
this machine is connected to an
isolated natural, go to my lab environment. And please
be reminded that you should not perform any sort
of scanning on systems or networks
which you do not have legal permission to do so unless you
own the system's. Okay. So without
further Ado, let's open it to know.
What you want to do. First
is let's check to see the network
that we are connected to, to put simply we
can use the IPA did, ER, come on. Like So
unpresentable, currently, you'll notice that I have
a couple of network adapters, which is eaten at 0, eat
at 1, ethernet to an Ivanovic wall,
darker adapter.
To put it simply only one of
these physical adopters, which is the Ethan
Annapolis has an IP address. Still currently. This
is IP address of my car designs machine on and
at 2 that I want, and I want to 172 TT
1.0 /, 24 Network. So I'm
going to copy this.
And let's actually perform a basic and
Maps can't actually do. I find number systems on, I want to do it,
or we could do pseudo and mop,
and SN, and this
will perform when things go wrong, as we have learned thus far,
and I'm just going to change this to
it. 0 likes to impress. Santa is
going to have for your call, it a spouse
with this is a possible that you used to log into
Kali Linux.
So no, it's performing pink. Scan on
a network on right now, as you can
see, there's a number of devices which are currently on life,
which one at work this. One, which is
a great way. We can simply ignore this, but most importantly,
we can see is it. 21. 22, 23
an even 20. If you
recall, my IP address is,
The 20 Sue?
Currently is three devices on a
network 21. 22, 23. So,
why do we need this information? Well,
what we can do is we
can simply use the 22
and 23 as decoys while
scanning the 21. So, in
other words, we can spend a number of
different Pockets to our Target on a civil Target
is not 21 on the target will think
that the 22 and
23 socks rescanning. So, how
could you do this?
Actually, it's quite simple. So to
do this. All we need to do is copy
our Target IP, which
is the 21 Avenue. Just need to know the
IP addresses of our decoys before performing
this. It's very important that you have your
decoys online. In other words.
That's why I prefer to Pink's console. She identify
what all the coin machines actually
online or offline, because the simple
scan of using, the decoy will not work properly
if your decoy machines are fine, so I
want to clear this.
Alexis sudu Amma and we
can see all the target which is 172 the
TT. 1.21 Aroma
decide. If you could be any IP on your network,
always in your lab environment in my
environment, this is the type. It up. I'm using.
I'm going to use a capital D on
this will specify to allow us
to choose our decoys. So, if you remember,
we have the 22
audio shop. 23,
so whenever,, could a
piece this in one small, oops, I made
a mistake. So let me fix this.
This will be 22.
And fox be
some of this.
I need to change this one as
well. So this is my entry. Okay. So right now,
all the target is the 21, and
we have two decoys are just 22 and 23 Center.
And right now
it says, week are performed to scan on able
to actually get to hostname. So what
could we do next census,? Do not
work. We could take a look at it. An hour. We got so why
he didn't answer. This actually is
piece right here, which I
did not notice the movement to go up. Once
more on. I'm going to
remove this piece. So it looks like this. And now
I'm going to have to answer ice cars going to work. So
this will take a few seconds. Actually
perform their mouths,. No talk. 21, and
it will be using the 22
and 23 hours because
So currently we get our results
down here to see the open ports and they're
running services, but on the
victim side or Target side to Target, which
is not 21, whole thing, the scanners are seriously anything from
these two systems, so it reduces
the risk of being detected. As using
a Carlos machine, another Technique
we can use is actually perform Mac
address spoofing by using a map.
So let me clear the screen.
I'm currently we can use sudo
and mop on. Can you
stash Dash spoof?
Poshmark, like, 200. Simply
means choose a random sauce MAC
address on Kali Linux, when performing
a Scott. If you recall when
you perform a scan, your Source, IP
address and your source Mac address is also insulted
in every pocket that is Santa Claus the
next week. So I simply spoofing your Mac address is
simply masquerading, the true identity of
your system, so that it would lessen marginada spoof.
Mac, address. Is this, is what device is? I'm
security, professional. Miss Thing. The source of
his attack is originating from a Cisco device just
saying. So now we can specify or
Target which is in this case 172t 1.21.
Again, this
is an IP address on a Target
within my network. So please be sure to
use an IP address with a new private or personal net
worth.
Bodyspec means, good answer. Look at
is actually generated a
random source Mac
address.
However, it says de who seems to
be down if it's really optional, I use and dash p.m.
Slattery try that. So I'm
going to use the pee and, and, and it
should scan without. Actually. Let's see,
example of a stunning, an
icmp probe to Target. So I took a chance and see
what happens again. So, it's proof of address. It's still
saying, okay, spoofing is
done one, IP address your who's
up? This seems to be a little problem.
So right now, there's a
little problem here and let's see if you try another technique.
So we are so going to spoof Mac
addresses, but do not try something a little different. I'm not
like maybe we could use is actually change your
Mac address directly on a network interface card.
You sent to call Mark changer to
do this. Let's check our network adapters Mac
address for you. So you can do, I can fake it
answer and on my system.
I'm actually using ethernet one. Can
see, my IP address. You could
also see the actual MAC address
on into peace talks. We get started. We
need to change the state of
eating at 1 and of course, my son
was using eat at 1. You need to change your
network interface with downstate to do
this. Let's actually use a consew do
I have config. Ethi, specify
your number and simply tied down and this
will change into these two down.
Next, what we can do is mock
changer. Each and this
will show us of various options. We have available. If
you change your Mac address. So we can
choose a particular vendor Mac
address. Why you sent a shell or we can just use Dash capital
E with some please set a
random vendor Mac, address of any kind of
interface. So let's use a dash cam and
We used to do math changer like
soup.
Dash capital E and specify going
to face. We
have our current MAC address or
punomoc address which is hard-coded into our
network interface card. I'm now, the Mac changer
to is giving us in next GTV MAC,
address on a window is so what
you going to do next is actually
to an Apple interface on at Susu? Do
I have config? Eth1 up Alice?
Verify it into pieces. Actually,
of put a new Mac address could do I have config once? More
on looking here on
the eth1 from my network adapter. I'm actually
using the new Mac address.
So, simply by using this technique, let's say,
for example, the Denmark on waterfall, Oasis
pool for marketers to hear directly on a map to not workout. You
can simply use some macchanger tool chest
as you saw a few seconds ago, to actually
change your Mac address or your net network interface
card during your security tester. No,
ethical hacking of intrusion to keep in
mind. You want to use these techniques or any malicious purposes.
Well, sort of illegal Acts.
During the course of this video. We took
a look at understanding in Need for using various evasion techniques,
skill on
performing evasion techniques using network, scanning social
spoof in your Mac address to buy using macchanger and
also spoofing your IP address on using
decoys using and map.
It an X with you. We'll take a look at assessing remote Information,
Services, owning a two week. I hope
this video has when a phone too. So you and I will see you in the
next one.