Now let's see how to get deeper and get more critical information about my victim that can be very useful.
Well I'm planning for this attack if I use the following switches and map minus small s capital the
minus
capital oh and the IP of my victim minus V will you capture the banner to help me identify the service
running on this machine and I will also add minus a minus A
will make this scanning very aggressive and will get you a much more details about your victim and then
click on enter.
So let's see how this aggressive scanning will be different sends the regular scanning that we used
before.
If you remember in a previous lecture we used minus capital or to get the operating system and he didn't
identify exactly what operating system he gave me some choice.
He said it maybe went to service but two or three or Windows Server 2003.
So he was not able to get me the exact real operating system.
So let's see when we use minus C what exactly will be getting it usually takes time around maybe one
or two minutes depending on how many service the system got.
But eventually let's see the result and let's see compare between the results that we will be receiving
now and before.
So as you can see it took around 90 seconds.
Let's see what we got it's a huge list and let's see.
So as you can see as you can see it got me support.
But now he's getting me not just the service the version.
So here he got an FTB as a service.
Important to.
But which specific FTB is used.
So sometimes you're going to find the product name or sometimes you're gonna find a service that can
be helpful for you while you are looking for a weakness to exploit.
So now he's not getting just the service.
He get me the version.
This is the banner grabbing.
OK.
So as you can see those are the first information I was able to get then I also have here is the remaining
port.
Let's get down and let's see what else I can get.
Let's see this information down here.
So we have the computer name.
We have the domain name domain is Company X Y Z.
Uh dot local.
Uh what else.
So more and more information just let's get down.
Yeah.
Here you can see that I get this specific operating system.
So he knows that this is a Windows Server 2003.
He didn't give me this confusion that if it's XP or 2003 or 2000.
No he gave me the exact operating system.
This is the domain name.
This is a computer name.
X Y Z.
So you don't imagine how important this information is.
And really later on you gonna relate what we are doing now which is the attack and you're going to see
how useful this information is.
I do want you to like understand each single line here but you need to know that I can get a very detailed
information about my target using and map.
The only problem was in map that generate a lot of traffic.
I mean if you do the same comment to all the computer Internet network you'll get a huge amount of traffic
you maybe get that network down.
So you have to be careful while using a map and you have to do that on small scale
would be very useful if you save the output of this file or the output of this comment in a different
file.
So if I put that for instance in
victim detail find you know the sign in Linux I mean the redirect I mean instead of having the output
of the comment on the screen I need to have the output of the comment on this file.
And by doing that he will scan it will take the same time but output will go through the file.
You can even use minus skeptical small all.
I'm sorry minus small capital G the same way we used that before to save them in a fight.
So this is another way for using and map.
And it's very very useful.
One more point I want to raise here which is do I need to memorize all this come.
This comment.
Actually you don't need you will memorize them by time you know because you're going to keep using them
and practice them on different scenarios.
But if you don't memorize a specific switch you can type and map minus minus help.
And this is actually in any Linux comment and it would give you all the switches and each with a switch
is doing what exactly.
And even some example as you can see down here.
So this is a handy help tool or you can use the manual but this is actually it's a huge file.
You can type men and the comment and this will give you every single related to end map but you know
it will take time to read also so I prefer to use minus minus help.
It will give you the information that you need as you can see here you already copy all the output in
the victim and you can type less to see all the fine and the victim is there.
And if you type.
This is a browsing comment victim you can because it definitely you need to see those output.
It's not just checking the file but you need to see the output for later on while you are planning for
this attack.