So, guys, in this you we are going to take a look at this blue card and map and map stands for Network
Mapper and it is very important tool for the enumeration.
And also scanning this and map scans the computers and the airports.
And also it will try to see those banners, I mean, the service services running on the spot to put
numbers and also to try to grab the Russian number.
So if you get those numbers, you can just search on Google if that is an old version and if there are
any exploits for this version.
So first, I show you the help of this map.
So there are two options out there.
That is a command line in place.
And the graphical user interface, uh, graphical user interface is called map, but ninety nine point
nine percent, most of the punters, we use the cover because it is very simple to use.
And also we can script.
It means we can automated.
So let's take a look at this, HelpAge, OK, now we can set the target using this ideal to our space
for the file containing the wholesale network.
But we can also specify and map the IP address.
So you can just say I sent four pings, can ascend is like ping sweep in previous versions of a map,
which is a P, but they have changed to a certain point.
That means it wants Kanada subnet range.
But to treat that are the hosts are all right and it will lead us to the airport getting our service
scanning.
And you can see just first scanning and then you assume you'll be scanning.
And this for other scans as well.
And X marks the spot.
You can see a sign for another four feet and also a six foot x munchkins.
So what this does is it will send the back to the, uh, destination and then destination since the
simplest act back then, this and map assumes that since I got this in Prosek, the host might be yellow.
If I got any research packet or if I did not get any bigger, then it is, uh, the system is different.
So that way it assumes because based on the packet response behavior and we can also see the Patronus
using the minus Pickman and S4.
So there will be no service versions.
Sorry, and the superscripts cancer and also support some scripting and so you can also use some basic
scripts that are already prepared in, and so these groups will try to fetch some more information from
their services.
So either you see them in a separate video about scripting engine and you can also detect the EU's is
running on that target, our target computer.
But it will not 100 percent accurate.
It just guesses based on our network package, they are some other network properties.
So these are options.
You can check it out and we can also say go put into our format and map and normal text format we can
use for with a comment to report IP addresses and phone numbers.
So here are a few examples and map version minus might be able to see what's happening on that map.
Is running at minus C, minus eight is very useful because it is a very aggressive Skåne.
It will detect auctions or scripts, scripts and etc..
So this is then for the, uh, checking the things we are the how many loopholes are there and how many
holes are there.
And now we are going to, uh, see your IP address using the IP command.
Now we have got this IP address because it is not what I will a map minus three, minus four transferable
to see what's happening on that map is running and all they want to minus a set and to check all the
holes that are alive or dead in that subnet range.
Let me copy this.
And what I say is slash 24, this is the crazy subnet range or departed subnet mask 24.
It will take are the hosts from one two to that 168 itinerate one two one two two one six zero two things
like the firehose of source.
So as you can see, we got a lot of host down and you can see here some are the some of Corsaro.
You can see hosts of 100 is one that is open up, for example.
So if you are
getting like those in computers, then you get most of the computers down.
So to, uh, filter only the lowest, you can say grep minus V, minus V for inverse.
So whatever I give you the pattern here that will be sorted and at not accept the format, I will get
the results.
So let me show you my because my English is bad.
So if I said go minus post on the lines with the host down will be removed and then the lines without
washed-out will be displayed on my output.
You will see within a minute.
So as you can see, the lines with the host are not shown to us.
Uh, one is that is Maroota one hundred.
So maybe that's why phone not to use up and we not full is discarded.
Next mission.
So you can simply report this address to check whether the computers are alive or not, and we know
that one nine two zero one zero zero one not too easily.
Right.
So let me do the scanning ministry and I'm going to let you see another option called Minocin.
Minocin stands for not being as a result of the result that the NSA does, because we are pursuing the
IP address and the turn of this and try to find that DNS domain name for this IP address.
So it takes some time that way.
We are not avoiding that, using this as an option and let's say minus capital P, and since we are,
um, scanning only the one IP address, we can assume that our hosts are alive and this and not can
reminding us it was still some time.
Now let's, uh, put the IP address.
So on and on.
Does he want to?
As you can see there, it is called Open Port, and you can see the port information 22 is open, as
is said, and it is open and GDP and not visible and so on.
So these ports are open.
So this.
And my view is, can the top to bottom boats by default, if you want to specify your range like a one
to two thousand, you need to specify the P minus B if you want to only scan one pot, you can take
minus beauty.
So that is a single pot.
If you want to scan the range of what you can sell.
One to one hyphen.
Two thousand.
So our remaining ports are closed at only six ports are open.
And you do scan all the polls that there are 65000 support, but if you want to scan all those, you
can tell minus B minus.
So minus B minus will scan for a report on that mission.
So by default and MAP will scan only for UDP exports, so to discover the UDP ports are 200 plus minus
you.
So this UDP scandal clears throat, police are in pursuit of.
The type in the password.
So this UDP scan takes so much time because the Republican establishment and before Conexion establishment
and Mackinder, that the computer is like right or not, but in UDP scan, the packet loss is very much
because we just send the packet to the computer and the computer would send the package to us.
So you cannot guarantee the computer.
So we make sure that by sending multiple packets to the same computer, that's why you be take so much
time to make sure that the the host is 11 or even the host is alive at the port is open or not for the
same reason.
Multiple barriers for the poor.
So let me run that in the background, I will open you up.
Well, most of the protesters for good booze can be pot, but it's very important for you.
You need to remember minus B, minus four percent below the nuts and minus B, and for skip the hostess
code, you know, what I want to do is you can do the starters can.
And we can take the IP address.
So this can also request the religious.
So there are those scans as well, like zombies, Cannex, Muskan, you can check that out as well.
You can simply put minuses and foreigners can scan an X for X.
So these scans are these are like somewhat attacks, which you can use either computer to scan and other
computers, but you can have the permission to scan all the computers.
So we were limited to this stealth scan.
And what we can do is we can find out the washer numbers running on these spot so that we brought how
much information with this enormous can so we can spend my necessary.
So there are six services and we'll get some more information about the services.
So as you can see, Europe is a very, very slow so I always you that Europe is scanning the background
and after some time you can see the scan.
So as you can see now, we got some Russian information.
And as you said, it's running open openness.
And we do we have that for Google.
If there are any exploits that will take advantage of this Russian number.
And you can see about one one three two zero.
So it's running Red Hat Linux.
And this is the modest an openness if you can type in Google this modest Saldaña, our version of what
you can get some experts, you can take advantage of this system.
You can see there is some power group and that name is my group and Apache and so on.
So like this, where in this we can get the worst numbers of these services running on the computer.
And there is a map scoop's.
I told you right.
We can perform the default and map scripts by using a C option.
So this will try to perform all this, some different groups on each part, whether they'll put if this
if that group succeeds, will get the output.
So you can type up and return to check the percentage of the progress.
Ninety nine point seven percent.
So in that case, I will show you another comment.
Another option for the mob to take the wheel is what to do that you put simply by Nassau and the IP
address.
So this will try to fingerprint the Russian version.
So it's running Linux kernel two point four percent or something.
OK.
I always do this to Ben for opening the details or telling the likely to an embedded device.
And that distance is one hope, and that is my router.
So in most other cases, in my use, some false positives, like it's telling the wrong channel number
or any wrong Windows versions.
If you go in and open this run this comment on my Windows time machine, probably reduce that No.7 or
some other Windows order versions because this, uh, Windows have some patches for this, uh, TCP
IP fingerprinting.
So as you can see here, so that everybody's always scanning and we can see our scripts have been performed
and those groups are telling us that on DP server, we can actually bizzaro, we can perform the method
that had the option.
So potentially risky, Sirtris.
And also, it seems the server and the title page for this is the default Apache manual page.
And you can see there is 443 port and that is secure the server.
All right, Sterling native title, and as a result, it ends on.
OK, no, it's, uh, using that beauty and beast, that comment to, uh, get the information and this
is tell my group, uh, down further to a computer, and it's using that as a musician, too.
So as you can see, we got some more information from these different groups.
And you can just put the minus and for the different groups and I want to talk peace, I want to show
you how to save or put.
So I think we need to give you the output, Puttnam.
And we can show that out within the hour, three formats, the three formats of printed format and normal
and my format and a similar format and droppable and my former well, you can use XML passes to get
information, but this graspable and map is very much useful.
OK.
No, I think we have got this.
OK, Temporada and my other Dambrot, and now let's see what the information stored in this grappler
and map.
These are the ports scandal.
But these ports are open, so you can see ports 22 or 80 and so on.
So it gives us the basic information because we did not put that minus, you see, in the previous comment.
You can also so in the previous case, we did not put their name that way.
It does take an IP address as the, uh, final.
So I think that majority are pretty much about this, and I think I have said almost all the options,
the general options he can do in the.
So you can also write the host or the iPad to strangers in the list and you can, uh, uh.
A.
You can put that, uh, we can specify the minus your comment so I can see you.
Can you still?
Not completely.
All right, I will end this war now, because this is taking almost a long time and you can see, I
mean, where you can see it is open, but 137 and 111 on this I.P. address.
So that's all you need to know about this map.
And if there are any further options, I need I forgot to tell you or I need to know.
Probably these are the basic options you can do.
So we'll be not leaving the atmosphere, but we will do that.
And, uh, most of the time, this is the starting phase of this operation and scanning.
So that's what the.