You may have noticed that this video is really something a bit unique for the course, and that's because
it's a video dedicated to one tool.
We don't often do that here in the aftermarket, but we've done it.
And that's because End Map is something you just have to know.
This is an incredibly popular network scanning tool and this is extremely popular, not just above,
not just among the black hats.
This is something that has been used by network administrators to help them document network information
for a real long time.
But of course, it's also popular in the hands of the attackers as well.
One of the reasons it's so popular is it's ubiquitous for every operating system you can imagine, and
there's a convenient graphical user interface as well as a command line option for running this popular
tool.
So let's go ahead and take a look at end map in action right now.
If you had up to the end map dot org website, you're going to see this beautiful site.
Yeah.
This site has looked like this for a long, long time.
But anyways, notice there is a download tab where you're going to find the platform for your download.
So you would download and install this on a machine, of course, and in a network where it would be
authorized to run.
Now notice here I am in the graphical user interface of the application.
So I've just launched the application.
And one of the things that's nice about the GOOEY is it will help you learn the switches and the syntax
of end map.
Yes, I've got flashcards.
It'll help you with this as well.
But you really should know these switches and this can really help you.
So let's say my target is my entire 1921680 subnet.
So notice I can enter 19216800 slash 24.
And then notice there is this profile here.
So if I want to do just a quick scan notice it will drop in these parameters here for me in an automated
fashion.
So it builds the command for you based on this profile.
And then I will click the scan button.
If you look really closely here, you will see that when you have a scan in process, you can see that
the scan is in process.
You'll see this little meter is running.
So notice that's how easy it's going to be to utilize the gooey in there.
You can see what I was telling you about.
There's the scan running that little meter off to the right there and notice it started the end map
scan.
Now these and MAP scans are very active.
This is not passive scanning.
This is a very active scan.
And notice it's going to take some time for it to complete the scan of my local network.
And keep in mind, I chose the quick scan profile option.
So while this scan is running, we'll come back and take a look at the results in a moment.
I thought this would be a great place for me to educate you on ways you can speed up your end map scans.
So the key to speeding up and map, well, first of all, only test for what you need.
I think that pretty much goes without saying that you don't want to be doing any map tests for information
that you don't actively need.
So make sure to keep the scope nice and small.
There are timings that you can manipulate, so you can always tune your end map scans by manipulating
the timer values.
This is often hit or miss, but can make vast improvements in the overall times of your scans.
Something else you should consider doing is separating your tests.
So again, make the tests small and precise what you're looking for, and then do another test looking
for something else.
Separating the tests will often help keep your end map upgraded, so always check that you've got the
latest version and you may want to run concurrent tests against different subnets, different nodes.
So that's something to think about.
You might be testing one area of your network at the same time is testing another area.
And speaking of areas and maps, speed and success is all about location.
So you need to be in a location where you can actually access the nodes that you want and test.
Finally, you want to make sure bandwidth is available and CPU resources are available in order for
these and MAP scans to be as snappy as possible.
Well, those are some things to think about in the regards of speeding up end map.
Let's go over and see how our test scan is doing against my local network segment.
So wonderful.
It's finished.
Look at this.
And remember now this was just a quick scan.
So it is showing me the 94 filtered TCP ports.
It's showing me the ports that are open on that particular device.
This is the report for the 19216801 node.
So wow.
It is showing me open ports.
Notice here's the 1921680 to the ports that are open.
The Mac address is reported.
So lots of incredible information on this quick scan notice.
That was the end map output.
They then show me the ports and hosts.
Then there is a topology tab that is fun.
So we can come in and let's see, how do we zoom on this, Poppy?
There's a way you can zoom in to this view.
Let me see here.
But anyway, it's it's not working right now because of my screen recording software.
But just trust me, you're going to be able to zoom in on this and notice move this around.
Yeah.
It's not wanting to work because of my recording software, but trust me, it'll work for you.
Here's host details that were found and just unsaved scans that were performed.
Notice, here's our hosts over on the left.
And there's also a list of operating systems when you do a scan to determine the operating systems of
your hosts.
So this is a very powerful tool that you want to become familiar with, both the graphical user interface
version.
And let me show you the CLIA version as well.
So really we are often running in map from the CIA line.
It is so incredibly efficient to do it this way.
Let's say want a new enumerate information or at least scan for information on one of my nodes.
Notice I can drop to the command line and I can just say and map one nine do 16801.
If I wanted to scan the entire subnet, I could have done that.
But here I am just scanning one of the devices.
This is scanning my local default gateway and I can see that it has ports open for HTTP, https, upnp
and HTTP proxy.
We're gaining so much information, including the MAC address of that local default gateway.
Now, if you want your cheatsheet, just type in n map and you're going to get the cheat sheet with
the switches that we can use with this powerful, powerful tool.
Some of these switches you would really want to know, and I'm going to be assigning you flashcards
so you get to know these switches.
But this is definitely a tool that I want you practicing with from a hands on perspective.
So again, it's not all that common that we go ahead and focus an entire video on a tool, but end map
certainly warrants that.
In the next video, we'll talk to you about some other scanning tools and other scanning techniques
that you should be aware of.