‫So one of the end maps, best known features is remote OST detection using TCP IP stack fingerprinting
‫and Map sends a series of TCP and UDP packets to the remote host and examines practically every bit
‫of the responses.
‫After performing dozens of tests, such as DCP Ascend, sampling TCP options support and ordering iPad
‫sampling and the initial window size check and map compares the results to it and Map OS DBE database
‫of more than 2600 known OS fingerprints and prints out the details.
‫If there is a match, each fingerprint includes a freeform textual description of the OS and a classification
‫which provides the vendor name, for example son underlying OS that would be Solarz OS generation,
‫let's say 10 and device type general purpose routers, which game console whatever.
‫OS detection is far more effective if at least one open and one closed TCP port are found.
‫So let's see the oil detection in action.
‫We have to use always detection with one of the port detection techniques, so I use Cin scan for this
‫demo.
‫The target system is Metis voidable that's juiced up 100 ports to make the query faster or just don't
‫give any port at the end map, scan top 1000 ports that won't take long.
‫Put up case, oh, for ozone detection and hit enter.
‫Here is a result of OS detection.
‫It's a general purpose device and running Linux with a version between two point sixty nine and 2.6
‫Dot three three.
‫If you like in math to be more aggressive, to have a more accurate result, you can use Oskin gas parameter
‫with o o se detection around.
‫Now, let's scan a window system and try to find out the version of iOS.
‫So here I have a Windows eight virtual machine.
‫I want to learn its IP address first over the command prompt type, IP config and hit enter.
‫Now, let's go to Carly and test if we can reach the window system.
‫First, helping the system know the system is not responding to the ping requests, or we cannot reach
‫the system.
‫So second, I perform an end mapping scan.
‫We know how to do it right type and map as in one seven two one six nine nine point one seven one and
‫hit enter.
‫Yes.
‫And Map says the host is up, so we are able to reach the system.
‫Now I want to scan the top 10 TCP ports of the system.
‫I add the reason parameter to see the reasons of the results.
‫All the ports we scanned are filtered because there are no responses from them.
‫It's not good for us.
‫So I had the early detection to the latest map query and rerun it.
‫No and map cannot find the details because it does not have a result set to probe or interrogate.
‫I would like to open a port on the Windows system and reply to and map scans and Windows eight VM,
‫I run this Internet Information Services Manager.
‫And start to host the default website of ISIS.
‫Open a Web browser and try to reach the website.
‫Typing the IP address of the system into the address bar, OK, web service is up.
‫Let's test if I can reach the web site from Carly, I go to Carly.
‫Open a browser.
‫Enter the IP address of the Windows eight VM and hit Enter.
‫No, I cannot.
‫And I think I know the reason.
‫In Windows VM, let's look at the firewall.
‫If HTTP traffic is allowed, so I open the firewall at the upper left corner, I click Allow an app
‫or feature through Windows Firewall Link.
‫Quick change settings, which needs to have admin privileges go to the end of the list, as I thought,
‫FTP services are not allowed.
‫Check it and click OK to apply the changes.
‫Now, in a command prompt to see Port 80, I run netstat and command.
‫When I come back to Cali, I see that the pages loaded in the browser.
‫That means Carly can reach Port 80 of my Windows eight VM.
‫Now in Terminal Scream, I want to run since scan for the Windows systems top 10 ports.
‫Here we have an open port now, so let's reply the scan with ozone detection option.
‫Now we have the early detection result.
‫First and Map warns us about the results.
‫It says the results may be unreliable because it couldn't find a closed port to probe anyway, and map
‫makes it best.
‫And here it says the operating system is one of them.
‫Windows 2008 Windows 8.1, Windows seven, Windows Phone or Windows Vista?
‫Good job.