TCP Scans || Ethical Hacking Course
Hello everybody and welcome back.
And in this story we will continue with some of the other options that our map allows us and you might
be asking why are we covering all these options for that map.
Well basically it is a really important tool and knowing all these options will make you at least 50
percent better in penetration testing since scanning is a really important part of performing an penetration
test so let us right here just open up our terminal.
Let me make it this big and in the other terminal right here
I will open up the commands at once can no commands at 60.
Where are we right.
All of the map commands that we cover in this particular editorial.
So that is just up here on CNN map.
And the first thing we want to check out is the minus key and the command.
Now we can find it right here or.
For example let's say you can't find a specific command in these bunch of the commands.
You can just type here and map and then grep minus p and just find your minus minus pen and to show
us not like that they did not want that to happen.
We just Oh yes.
And Matthew does this help Rep. Pete Van your boy doesn't that only
Yeah.
Never mind.
For some reason that worked yesterday but doesn't want to work now so it doesn't really matter.
Just find the command right here let me just find it.
It should be minus capital P and then and here it is treat all hosts as online ski post discovery.
Now this is an important comment.
You might be asking why.
Well some of the posts that you scan on the network can appear to be off line.
So for example if you know a specific course must be running and is online but let's say you scan it
right here and it says that it is offline.
Now this small laptop so it will say that it is online.
The moment.
I've had some scans that basically said that my machine that I was scanning which was right next to
me and which was connected to the Internet and to the network and running basically said that the host
was down and every time I specified the minus p an option it basically skips the whole discovery and
the as it says treats all hosts on the network as if they were online which will perform the scan and
it will give you the results without it without whose discovery.
So let's say for example I scan this IP address which I don't have anything wrong on it so it will say
that the host is down as you can see right here zero hosts up.
This will be the same output for the machine that is running but it is blocking the ping requests or
it is showing other machines that it's off line.
So in that case which specified the minus pen option and then you specify the IP address and it will
show as if it is online.
Now in my case it won't show since I don't have anything there so let me just can my laptop.
Once again I just typed here and map minus pen.
And then one night to that 168 that one that eight.
And it will skip the whole discovery and it will basically automatically say that my host is up and
running and it will scan for its open ports.
Now let me just see it has finished around 22 percent.
You might notice that the scan is going a little bit slower
so we won't be waiting for that to finish.
There is no point or we can just leave it right here.
Perhaps it finishes while I type it right here.
So minus pen and then the IP address basically the IP address of any machine that you're scanning or
any website that you're scanning of course trying not to scan the websites that you do not have permission
on.
You can always use the scan me the DOT and map dot org which we have permission to scan by and map.
Well you can basically just use the methods point the political machine that we installed or you can
install basically any other virtual machine that you will use in order to scan and and attack now since
I can't really run matters collectable.
It gives me some error.
I downloaded another machine to show you how to install and I will show you why we will use it.
Basically we will use it extensively in the website penetration testing part.
I'm not really sure if Matt supportable has always in it installed I doubt.
So you can check out if it has that and then you don't need to install this little machine as well but
if it doesn't you should install this virtual machine as it is vulnerable and it is used for that penetration
testing.
So we will cover some of the attacks on the Web sites using this machine.
But let us see right here.
As you can see the D scan has finished and it treated our hosts was up and it discovered an open port.
It all scaled back.
The MAC address.
It is a useful command if you know that the host is running and it is showing that it is offline.
You just type your minus pen and you will have your host scanned now.
The next option I want to show you which I didn't show you before.
If we type your map would be a minus as Steve's comment.
#ethicalhackingcourse #ethical