Lesson 25 : Zenmap Video Lecture | Ethical Hacking using Kali Linux (in English) - Software Development

the name of my computer over here was
I'll just go ahead and tell you this is
this is the name of my computer is test
user over here and I have the work group
work group was work work group I did not
go ahead and change it it is a default
this is a system time in that computer
and it has a user level authentication
that means it has a password and I can
also go ahead and try to miss assigning
is disabled since I won't be able to
access it over network but a so that
means I need to go ahead and extract it
separately so this how it looks like so
I'll just go ahead and clear it out so
I'll just go ahead and start with an
intense can plus UDP scan I'll just go
down close and open since I would be
perfect perfect and I'll be doing
intense plus UDP scan and let's see what
would be the difference so UDP scan
shows us from which are we can go ahead
and transfer files like let's say
pictures or songs with virus inside that
or new trojans or any back doors inside
that so it will be showing all the ports
which through which we can go ahead and
transfer the user Datagram protocol in
just open another Zen map and I will be
doing another ok
and I will be doing the TCP all TCP port
scan this is quite noisy and if you try
to do this into a company's computer the
administrator will easily be able to
detect that someone is trying to go
ahead and get a footprint of your
computer and he may at the same point go
ahead and throw you out of his Network
so you need to be very careful where you
are going to use this specific all tcp
port scan and 60% 0.6 percent then all
the thousand poor sap checked have been
checked over here sixty percent is ten
fifty nine percent is done let it run
through all TC ports is quite you can
see is quite faster than any other one
but because it is since it so noisy it
will not go undetected and if you do
with just the UDP scan it will go
undetected and that's why it is now it
need it is quite slower than the normal
one so the service stealth can is
completed and we have the service can
started right now this detection is
started yesterday on point six percent
over here okay three point five percent
done perfect so this good and cancel
this and because it will take quite a
long time and I'll go ahead and show you
how you can go ahead and ping scan it's
just to check whether the operate system
is still active or not now I kept out of
it it's done so I can see that this host
is currently up a since and Inter up
using just this you can also go ahead
and do the same thing over here you can
type SP and you can go ahead and check
the same thing and you can hit enter
same app does the same
as nmap it's only that it has a graphic
user interface and yes it's using SN
over here then SP and it's showing you
all the IP addresses of all the things
that are active perfect so we have it
over here again OS can may be unreliable
because they were unable to find one
open and one closed port but it did find
lots of information that we can use and
same one hop PID is incremental that
means every week new every day operating
system only one IP address should
increase it means that Cali Nix has 0.13
zero it has 1 3 1 so sorry oh yeah it
has 1 3 1 and if there isn't it on extra
operating system on the land it will get
1 3 2 so IP address is incremental and
these are the flags over here for test
user and workgroup ID we have the
computer named workgroup again assembly
level security and it has also trace
routed so you don't need to additionally
download any specific scripts or
application files to go ahead and gather
information this is how nmap looks like
so similarly there are pink square as a
trolli over here we have quick scan and
let's do it try to check the quick trace
route and how it looks now it will show
you from where it is exactly going
through this is a Mac ID of all of these
things it's the same as doing this but
it will also give you since when
what is the best latency to go ahead and
reach them so this has 17 seconds
latency perfect after that we have a
regular scan and I'll go ahead and use
slow and comprehensive scan which I
would probably be not be completing so
I'll just go and complete this till then
ok perfect so the regular scan shows us
all the information that 990-n ports are
closed which is quite different from the
previous where we got 996 that means it
was not able to clearly go ahead and
check all the ports yeah 96 power filter
ports out of 999 3 port open and 3 ports
are open and the remaining are closed
it means the
are filtered out by the firewall and the
host is up so you won't be able to get
the operating system information over
here and the 253 IP addresses or total
of four hosts are open and they can't
change so this how we can go ahead and
gather information we are nmap or Xen
map and this not just it there are much
more things but I won't be able to show
you if you want to go ahead and gather
much more information you can just type
in map and you can go ahead and read it
over here all the information that you
need you get everything from OS
detection to trace routing in everything
and if you are able to use n map you can
also anytime use the Zen map which is
quite more use easy to use and if you're
new and since over here in the previous
one you were not able to actually gather
much more information about the host
operating system you can use an
aggressive scan over here as you can see
OSS can and will show you the exact
operating system that means whether it's
Windows 7 or 8 or phone it will give you
the exact operating system that it has
and but it will be since its accuracy of
the person having the computer will come
to know if he has IDs installed or that
make sure to be easily come to know
about this so that is it about nmap in
this tutorial in the next tutorial we'll
be starting with the harvester the huis
and the DNS enum as to how we can go
ahead and use them