Let's check out how we can figure out what operating system is our target running just by scanning it
would jump in and map.
This feature is quite popular as they have a database of thousands of known operating system fingerprints
that they compare with the host that you scan in order to find out what operating system is.
It's running.
But for this to work, a target machine must have at least one port open and one port closed, which
we need not to worry about, since our anticipatable has both open and closed ports, however, it could
not work for some other targets.
What I'm going to do in this video is I'm going to try to scan my anticipatable, which is running Linux,
and then I will try to scan my Windows seven Votto machine that I got right here and I will try to scan
my Windows 10 host machine and let us see what results can we get.
Let's see whether Unmap can figure out what operating systems are they running.
If I go back to my clinics and let's go with Anticipatable first to run the operating system feature,
we must use pseudo and after unmap we specify Desh OK for discovery of operating system.
Then we specify the IP address.
And if we specify the IP address on display at the first press, enter.
Type in my password.
It will take just a few seconds and download the results, we can see the testing, it tells us right
here that at this point the ball is running Linux.
And down here in the always details, it tells us which version exactly is it running and how many cops
is the target distance from us?
It says one, which means host is inside of our network.
And besides all of this, it also tells us that the machine that we are scanning is a virtual machine,
as we can see right here.
It managed to figure this out by the Mac address that metastable has since virtual box machines have
Mac addresses that start the same.
And these are these three first numbers.
This is really interesting because it can sometimes help us to realize that our target is an actual
war machine and not a physical machine, which could possibly indicate that we're scanning a honeypot,
which is usually a purposely vulnerable virtual environment that is used to luring hackers in order
to find out whether they're being attacked.
This is because usually an attacker will go for the most vulnerable machine first, and that's how they
catch him.
That machine could possibly be put there on purpose.
So for Anticipatable, we got the correct result.
It tells us that it is running Linux, which is correct down here.
It even tells us which version of Linux is running.
And we can also see right here by the Mac address that this is a virtual machine.
So we got a lot of useful results from Anticipatable.
Let's try with my Windows 10 physical machine.
So if I type up their show and to scan my physical machine, I must check the IP address inside of my
command prompt.
If I type IP config, it will tell me that my IP address one to the 168 at one seven letters typewritten
one add to that 168 that one dot seven and run the scan.
It should also take just a few seconds.
Once again, you could check at what percentage is attached by pressing the upper error and it's currently
eighty one percent.
D'Angela, just wait for the remaining few seconds to finish.
And it will tell me right here that it didn't manage to discover always details.
Now, why is that?
Well, because we can see right here all thousands can ports are either closed or filtered.
And remember, to discover an operating system, we need at least one open port and one close port in
this case, there is really nothing that we can do to discover operating system with that map, since
all ports seem to be filtered.
Let's try the same of Windows seven machine.
I know for a fact that Windows seven virtual machine has one port open, so let's see whether it will
manage to figure out the operating system on that machine if attached to the dashboard.
And I already typed IP config in my Windows seven.
The IP addresses one add to that 168, that one that 14.
Let's specify it right here.
Let's wait for this to finish.
And it gives us a bunch of always details up here.
We have a warning that says results may be unreliable because we could not find at least one open port
and one close port.
It did manage to find one open port, which is this port four, four, five.
But all the other ports are filtered.
However, based on this one open port, it try to guess what operating system it has and it was relatively
close, it managed to guess that the operating system is windows and sometimes this could be enough
for us.
We can see right here it specified Windows seven, which is correct, but it also specified Windows
Vista and Windows 2000 and eight, which are incorrect guesses.
Hmm.
So we can say that it managed to narrow it down for us, but it didn't really hit the correct one.
So we checked how to figure out what operating system is the target running.
We noticed that it doesn't always work, but this information with the information retrieval get in
the next video will be more than enough for us to be able to conduct a vulnerability analysis.
Let us see in the next video how to get exact version of services running on open port.