使用扫描网络并查找活动主机分类其他.pdfVIP

ScanningNetworksandfindingalivehostswithNMAP

1.RunNmapandperform3differentscansagainsttargets.

-performXmasscanagainstWinXPmachine:

nmap–sX–vtargetIP

-performaudpscan:

nmap–sUtargetIP

-performanACKscan

nmap–sA–P0targetIP

CompareresultsfromUDPandTCPscansthatyoudid.Whichoneismoretimeconsuming?

2.OpenupaterminalonyourKalimachineandtypein:fping,then:manfpingforoptions

Runtheprogramtoperformapingsweep.

Fping–a–g(IPnetworkrange)hosts.txt

Forexample:fping–a–g192.168.23.100192.168.23.254hosts.txt

Openupthetxtfiletoseeresultswith:cathosts.txt

3.Packetcrafter.UseHPING3program,createdifferenttypesofpacketsandsendthemtoa

target:

•CreateanACKpacketandsendittoport80onthevictim:

Hping3−AtargetIPaddress-p80

•CreateanSYNscanagainstdifferentportsonavictim:

Hping3-850-56−stargetIPaddress-v

•CreateapacketwithFIN,URG,andPSHflagssetandsendittoport80onthevictim:

Hping3−F−p-UtargetIPaddress-p80

4.Usingtracerouteoptioncanbeusedtotracethepathtothespecifiedhost:

Example:nmap--traceroutescanme.nmap.org

5.Turnonthefirewallonyourtargetmachine.Launchthefollowingcommand:

nmap–sS–T4–A–f–vtargetIP

TrytospoofyourMACaddressalso:

nmap-PN--spoof-mac0targetIP

6.Nmapscriptingengine(NSE)–prebuilttoolstodovariousthings.Toinvokethemshoulduse:

“--script”argument(auth,brute,discovery,dos,exploit,external,fuzzer,intrusive,

malware,safe,version)

Trythefollowingcommand:

nmap--scriptbannertargetIP

Thescriptcalled:“vuln”willtrytofindallvulnerabilitiesonatarget:

nmap--scriptvulntargetIP

Youareencouragedtotrydifferentscripts,getusedtothemandseetheresultsofeachone.