The second program that we'll use for network mapping is and Mabbe.
Now in the previous lecture we use net discover and we see how nice it is to quickly discover all the
devices connected to our network see their MAC address and maybe get the vendor and map takes scanning
to a whole new level.
It might be a little bit slower than a Discover but it'll show you much much more information about
the target so you'll be able to see the open ports you'll be able to see the running programs or the
running services on these open ports.
You'll be able to determine the net the computer name the Operating System running on that computer.
If you're in a network you'll be able to discover all of the connected clients you'll be able to bypass
security bypass firewalls and so much more and map is actually a huge tool and there are books and complete
courses done just to teach and map the map book would actually be a really good read.
Once you're done with this course now because this tool is huge.
Were not going to be able to cover all of its uses but in this lecture I'm going to show you the basics
of this tool how to use it to discover all the connected clients and see useful information about them
and will actually use it more.
When we get to the gaining access section.
We're actually going to be using Zend map which is the graphical user interface of and map so to run
it in terminal.
You just have to type them up.
You can find it under your applications menu.
Now as you can see it has a very very simple interface.
The first thing that we see is the target input box in here.
You can put your target.
You can scan any IP that you can reach whether it's a personal computer whether it's a server whether
it's an IP for a web server or for a Web site for example that you want to discover all the open ports
and all the running services on it are like what we're going to do right now.
We can put a range similar to what we did with net discover and it'll scan this whole range discover
all the live IP of the eyepiece of the connected Michi is on the same network and display information
about them.
Now we'll have a look on how to scan sevres in the gain access section.
So for now since we are still in the net where a kiking section we're going to put arrange to discover
all the connected clients and see useful information about them.
So right now I'm actually connected to my wireless network.
That's why I'm going to specify the whole range on that network.
And we see how to get that in the previous lecture.
So a 2 1 9 2 1 6 8 1 1 of 24.
On the bottom you can see the command.
This is actually the map command that will be executed when I hit this kind bottom.
So like I said Zen map what you are using right now is just a graphical interface that will run this
and map come out in the background and show me the results.
So if you know custom and map command you can put it here or if you just want to see a map terminal
you can literally copy this command piece that terminal and it'll give you the same results that you
would get if you're on it here.
Tentatively if you don't really know much about and map and its commands you can use one of their own
profiles in here.
So at this juncture we're actually going to be using a number of these profiles and we'll see the difference
between them in terms of speed and the information gathered.
So I'm going to start with the scar.
This is a very quick scan.
It literally just pings every possible IP in the range.
And if it gets a response It'll record this response and it'll show me the devices that give you a response
which means that these are the devices connected to the network.
Now a lot of devices do not respond to requests even if they are alive.
So the list that you'll get in this scan might not include all the devices connected to your network.
Now once the skynyrd's done as you can see.
We can see the list of all the connected devices in here.
And in here we can also see the mac addresses for each of these devices.
We also see the vendor.
So for example we can see that the device at 1 9 2 1 6 8 1 1 is a Cisco device.
This is actually my rotor and it is made by Cisco.
So this is correct.
So we can go ahead and start looking for exploit in this device.
We can also see the 1 9 2 6 8 1 10 is the haste to see device.
And again this is a hasty Seafoam and this is correct.
And since it takes to see then we know that it's probably running on Android.
So as you can see we're getting more information about the Connected clients.
Again we can see the 1 9 2 1 6 8 1 12 is an up or device so it could be a phone a tablet or our Mac.
We can see the next device is a Dell.
So again it was a very quick scan but as you can see it still gave us much more information than what
we got from that discover.
The next comes that I want to show you is the quick scan.
Now this is going to be slightly slower than the pink scan but it's going to show us more information.
So right now you can see that the scan is showing us the same information that we've seen before with
the piskun.
But it's also shown us the open pore ads on each one of the Discover devices so it's able to discover
the follow in the rafter and we can see that port 80 is open.
This is actually the port used for other outer setting space because it runs on a web server.
So the sist correct.
Again we have our Apple device here that we said it might be a phone or a computer or a tablet but we
can see now it has 22 open so this is a port for a service call.
SS Hage which is designed to allow remote access to the system.
It's running on again.
If you go on all the other devices you can see all the open ports and the service is running on each
one of these ports.
Now the next lecture will build up on this real CEO to gather even more information and you'll see how
important information gathering is because we're going to use the gathered information to hack into
an iPhone that is connected to the same network.