Hey, everyone, welcome back to the
course. So in the last video, we
racked up our lab on SkÃÂ¥ne,
so we went ahead and used an map
as well as paying three.
We focused on those for most of our
commands as well as we went ahead
and modified Windows firewall, which
again, essentially all we did was
go ahead and turn Windows firewall
on. So we ran a command for that and
then we ran a command after we
turned the firewall on to notice any
differences at all.
So if you ever watched that series
of videos yet, go back to those and
watch that. And now we're going to
move into module four in this video
with our fingerprinting.
So we're going to talk about Alwis
fingerprint. Now, we're not going
over a huge in-depth fingerprinting
because we're primarily focused on
scanning.
But during our scanning at a
numeration phase, we want to go
ahead in the enumeration portion and
talk about operating system
fingerprinting. So all that means is
we're trying to figure out what
operating system is in use on our
particular target.
So for this, we're going to use a
cyber lab environment.
Now, again, you can use essentially
for this course, I try to design it
where you can use your own virtual
machine. But keeping in mind that
your IP addresses and some of the
commands might be slightly different
in your particular setup.
So let's go ahead and get started
here. So we're just going to search
for ethical hacker once we're logged
into the cyber website, which,
again, if you're watching this
course, you should be.
And we're going to choose this
certified ethical hacker, S.H.
set of labs here.
We're just going to click the launch
button.
It's going to give us another screen
here where we click on the launch
item and that'll actually launch the
lab environment for us.
And you'll see on the left side
here, all the labs will pull up.
So here we're going to be looking
for the OS fingerprinting lab
or the operating system
fingerprinting lab, you'll see it's
the first fourth option down
here on the left side.
So we'll go ahead and click on that.
You'll see a start button click on
that. And that'll actually launch
our lab where we see our virtual
machines.
So now we want to go ahead and turn
on all these machines.
So the way we do that is just hover
your mouse over top of the name
section here and you'll see a power
on option right there.
So just go ahead and click on that
and then click power on on that one
and just make sure you're turning on
all these machines.
Now, it's going to take a few
seconds to pull all of them up.
So I'm going to go ahead and pause
video here and we'll use the magic
of fast forwarding.
And once it's complete and put it
all the machines up, we'll go ahead
and restart the video, move forward
in our lab.
All right, so you see here, we've
put it up all our machines.
Now, again, if you haven't started
all your virtual machines, go ahead
and pause this video.
Make sure you put those up because
you will need them as we move
forward in the lab.
So let's go back to our lab document
here, and again, these step by step
guides are all in the supplemental
resources sections.
You download them all in one shot
and those who cover all the labs
we're doing in this particular
course, alongside that,
there's some assessment information
inside the supplemental resources.
So make sure you do those
assessments to actually fully
practice your skills as we've gone
through the course.
So our next step here, we're going
to click on the Windows 10 machine,
which is the Lab 110 here
and step six.
So let's go ahead and do that now.
It's going to launch up that machine
for us and it might take a second
or so for the desktop to fully come
up for us here.
Once it does that, we're going to
double click on the Vincey viewer
icon. So it's that orange colored
icon. Kind of looks like a little
tiger's eye.
We're going to double click on that.
And then what we should see is the
IP address of our Kelly Linux
machine in the box already.
And then we'll just click the Connect
button and enter our password
in.
So let's go ahead and do that now.
So it is going to double click on
this icon here.
You'll see it does have the IP
address of the Calli Linux machine
in there for us. So all we have to
do is click the Connect button
and now we just need to put in our
password, which is the word
password. So capital P
and then lowercase HSW.
And then we're actually going to do
the number zero and not a capital or
lowercase O and then a lowercase
already to finish out.
So capital P
lowercase a s s
w again the number is
zero and then lowercase
r d. Once you've taught that in
either click the button or
just press enter a new keyboard.
Now that will actually pull up our
Kelly Linux desktop for us.
You'll see this little error message
here. We don't worry about that for
our lab. Just click on the OK button
that will close that out.
And then if we go back to our lab
document here, our next step is here
in step ten.
We're just going to double click on
that root terminal icon
and that launch a terminal window
for us. Now, again, if you're using
your own set up, you're just open
a regular terminal window and you'll
want to adjust the IP addresses for
your particular network
and whatever you're using on your
side.
So we'll double click the terminal
icon for those using the Siberry
labs and then a launch, a terminal
window for us.
And might take a second or so there
we go.
All right, so now everyone should be
in the same spot. We're just going
to type in this command here.
So and map all lowercase
space, dash lowercase s
capital S..
So we're basically just performing a
sound scan there, a space, a dash
o to check our operating system.
So again, for this lab, we're just
checking our operating system.
We're not checking anything else we
could do a dash capital A
and that would allow us to check
other items as well.
But here we're going to be checking
the operating system itself and
then we're going to run it against a
couple of IP addresses here
and we'll see what kind of output we
get back. So our two questions we're
going to try to answer here at the
end. What operating system is
in use for both of these IP
addresses are.
So let's go ahead and type this
command in here. We're going to
start off by just typing in and map
space, dash lowercase s
capital s
so and map again all over case
a space a dash lowercase
s and a capital S..
We're going to put another space and
then a dash and a capital O
so you'll see here the capital O
and then we're just going to put in
our IP addresses here.
So the one entity about one six
eight zero one and
four.
So let's go ahead and do that now.
So we're going to put a space then
one attitude, two one six eight
zero one
air space and then one eighty two
point one six eight zero
four.
All right. So once you type those
in, just enter key and your
keyboard. Now, it might take a
moment or so to go ahead and run the
scan. I'm going to pause the video
and once it puts the output, we'll
start back up again.
All right, so we see that we've got
our output now.
Now, if you haven't gotten your
output yet from running the scan, go
ahead and pause this video and just
wait until you get your output.
And if it's taking a long time, just
double check your command and make
sure you type everything in
correctly.
It should only take about 10 seconds
or so at kind of the max.
All right. So let's go back to a lab
document. We have a couple of
questions. As I mentioned, we want
to figure out the operating system
in use basically for each I.P.
address. So let's take a look at our
results and we'll see what we got.
All right. So we can answer the last
question right now, since we're
right at this portion of the screen,
we see we got 192 one six
eight zero four.
And if we look here, we see that
it's estimating that it's running
Windows 10.
So Microsoft Windows 10,
10 machine IP address.
So we're good on that one there.
And if we scroll back up here just a
little bit, you'll see that
we have our output for the other IP
address as well.
So come up just a little bit more
and you'll see that for this
particular IP address or one hundred
two point one six eight zero
one, this one
right here, you'll see that our
estimated operating system in
use is something related to windows.
Now, it wasn't specific,
right? So if we see here, we it may
be Windows Server 2012,
it may be Windows seven, et cetera,
et cetera.
So just keep in mind that it is
showing that it's likely a Windows
machine, but it doesn't know for
sure what the operating system is.
Now, we know that this IP addresses,
we've learned throughout much
of this course, this IP address
happens to be for this server right
here, the pleb S01.
So in the likely event
that we figured out as a Windows
machine, and we know already
from our our personal
knowledge that it's a Windows Server
machine, this is more than likely
the operating system that's in use.
And yes, it actually is the
operating system that's in use on
that particular device.
All right, so this lab, we just went
ahead and did a fingerprint, we
checked to see what operating system
was running on this particular
target machines.
And the next video, we're going to
go over banner grabbing.