Hey, everyone, welcome to the
scanning enumeration and
Vulnerability's Course, my name is
Ken Underhill and I'll be your
instructor.
So what are we actually going to be
doing in this course?
Well, you're going to be performing
a lot of different scans and
primarily we're using and map and
mapping three.
We're also going to be using those
to determine the operating system in
use on a target, as well as
determining open ports and
performing vulnerability scans a
little later on in this course.
So what are prerequisites?
While this course is intended for
individuals that are studied
for things like these sort of
ethical hacker or penthouse plus
exam from companya, also
individuals that are looking to just
learn more about this particular
topic, whether they be for a
penetration testing, which is kind
of the focus of the course, or just
as a kind of a blue team or defender
and just learning more about
scanning enumeration and how we
can find vulnerabilities.
So prerequisites, you definitely
need to have some kind of
understanding of Linux.
So specifically the Linux terminal
and more specifically the Calli
Linux terminal, because that's what
we're going to be using in this
course.
We also want you to have a basic
understanding of computer
networking. So that way, when we're
talking about things like IP
addresses or lookback
interfaces, you kind of have an
understanding of what that is
also. So you have an understanding
of the TCP three way handshake.
And so as I start talking about that
throughout the course, you're not
totally confused and your eyes don't
start glazing over.
So you definitely want to have some
foundational networking knowledge.
And you could get both of those
items on the Siberry site.
You can get information about Linux,
as well as basic networking
knowledge and various courses.
You also want to have an understanding
of operating systems.
So we'll be looking at
Windows OS, specifically
Server and Windows 10.
And when I say looking at, I really
just mean that we're going to be
using those.
And then also, as I mentioned, our
Kelly Linux machine.
You just want to be familiar with
hardware, we're not going to, like,
dove into hardware or anything like
that, but it's just good to have
that foundational knowledge.
She understand, like what we're
actually doing as we go through the
process.
And as I mentioned before, if you're
studying for the U.S.
council certified ethical hacker or
the Company Apprentice plus or any
other type of penetration testing
or quote unquote ethical hacking
related certification, then this
is a good course for you to take to
hone your skills just a little bit
more.
So who am I, you know, who
is this guy teaching you?
Well, my name is Senator Hill.
As I mentioned, I'm the master
instructor SIBERRY.
I'm also an adjunct professor of
digital forensics.
Remember that, by the way, Hinton,
to wink wink, I hold a master's in
Cybersecurity and Information
Assurance, as well as an
undergraduate degree in
cybersecurity management and
information systems.
As I kind of mentioned before, I'm a
certified ethical hacker as well as
a computer hacking forensic
investigator.
Both those exams are from Easy
Council.
And then I'm also studying
for my company, Apprentice Plus
right now. So if you have questions
on any of the above exams,
then I'm probably a good resource to
answer any questions you might have.
I'm also an exam reviewer as well
as an exam writer for SC Counsel, so
I've reviewed the latest version
of the S.H.
exam for them.
So I won't tell you what modules and
I definitely can't tell you the
answers.
And then I've also written questions
for the computer hacking forensic
investigator investigator exam.
So the latest version that's out, I
actually wrote some questions for
them.
And again, I can't tell you the
answers to that one either.
So what are we covering this course,
you know, I mentioned this about
scanning renumeration and
vulnerabilities, but what are we
actually covering? What we're going
to show you how to basically
run some commands, essentially to
look at life systems
and check for open ports as well.
We're going to check, you know, run
a lot of different scanning options
with a map. And it's being three
about different some of the
different flags we can use, for
example, like a scan in
that map doing the dash lowercase s
capital s, and that'll make more
sense as we go through the course
much before we're going to cover
some fingerprinting and better
grabbing. Again, those are kind of
numeration related things.
So not fingerprinting an aspect of
this kind of footprinting type of
stuff, but fingerprinting from like
an OS standpoint of figuring out
what operating system the target
might be using.
Module five, why should work with
some different renumeration tools,
things like Digg and Finger,
and no, it's not the middle finger,
it's actually a command.
So you'll learn about what that is.
Module six, we're going to cover
vulnerability. So from that context,
all these are actually lab based
modules. So modules two, three, six
are all lab based.
And so we're going to have a lot of
hands on there. So with the
vulnerability section, we'll go
ahead and run a couple of
vulnerability scans with different
tools so you can take a look and see
what that looks like.
Module seven, I talk about an
assessment in there and then we,
of course, do our wrap up with our
conclusion video.
But again, I talk about an
assessment in there and I'll talk
about that as we go throughout the
entire course.
So we have a couple of assessments
for you in this course.
No one will be a assessment
on vulnerabilities.
So that one I will show I have a
video that shows you where to go.
Look for that in the Siberry lab
environment.
And then I also have a document
that's got a bunch of different Emek
and map commands excuse me on it.
And that way you can download that
and you could practice's on your
own. Now I
design this course so the labs
are all with the cyber lab
environment. However, I
designed the course to where you
could actually do all the labs on
your own virtual environment.
So if you're not a paid member for
some reason, you know, by the way,
you should consider that.
But anyways, if you're
not a paid member, this is a good
way, a good course for you to take,
because you can actually do things
just in your own virtual machine
with Kelly Linux and of course,
keeping in mind that the IP
addresses will be different because
you're doing whatever on your own
network and not inside of the
Siberry lab environment.
So how is this core structure,
what's actually going to be on
demand videos and with those
we've got labs now with the labs,
I've got a bunch of step by step
guide to walk you through all the
labs. So if you want to pause the
videos and not watch me do it and
just practice it on your own, if
you find I go too fast or too slow,
then that's why I've created this
step by step guide so that we can
just go through it on your own.
And you don't have to worry about
following along in the video.
As I mentioned, we got assessment.
So, again, that's going to be the
vulnerability assessment that's
available inside of the Siberry
paid model.
And then also, as I mentioned, the
downloadable and map
listing of commands that I want you
to go run in practice and understand
what you're doing with those
specifically. And maps going to be
very important if you decide to take
anything like the Easy Council CCH
exam or the TIA Pentax
plus exam, especially, especially
for Pentax. Plus, you definitely
need to understand the output
of components. You need to be able
to look at an output of and map
command and then understand like
what command was actually run to get
to that output.
And then, as I mentioned,
supplemental resources.
So in addition to all the lab
documents, the assessment stuff,
that's going to be additional
helpful information that you can
download with this course.
So a quick post assessment question,
and I hope you were paying attention
to my hint, hint, wink, wink thing.
So question here. I have worked as
an adjunct professor and instructed
on art history.
Is that true or false?
All right, so that's obviously
false, right? If you were paying
attention, you heard me say that I
was an Asian professor of digital
forensics or computer forensics, if
you're not familiar with what that
is.
And most people have learned about
forensics from watching television
shows, et cetera.
So just think of it as you're
looking through a computer and doing
the same things they do on those
crime shows.
Or so this video just went over a
brief introduction in the next
video. We're just going to jump
right into module two.