And members as you can learn everything about a map here.
But in this lecture I'm going to show you a small operations how you can use and map for information
gathering or other purposes.
So let's start working with and map and Carly Lynn said.
I think enabled by default but if it's smart you can install it by using sudo.
Get this done and map but I already have installed it so I don't need to install it again.
So let's start with basic operations so and map can be used to bring our check.
If on that if a host is our device is up or not you just have to give the IP address of this device
and you can see if it's working or not.
For example if we want to check if my Google server is working at night for example the Google server
that I'm using to access information to call is our partner.
So do this I can.
It's also a ping operation so we can simply type and map and then space and then the name of the host
that we want to test.
In this case I want to check out my Google server so I am going to a W WW Google dot com.
So as you can see that map has started it takes some time to scan it.
But another Scan is complete as you can see.
Will you give us the IP address of the Google server and also the DNS server diversity in this regard
which is here.
So this is how you can access code and information about the host.
For example if you want to attack certain websites then you can use this to get the IP address of the
website or Saroyan which is hosting this Web site.
So this is how you can gather information about the host.
So this is information gathering over the network which is given by this Web site link.
You can also access it directly to the IP addresses for example if you want to know you and you want
to spin you Google DNS server so you can simply write and map then it dot it but it not paid.
So this is the IP address of Google DNS servers.
So let's wait for the execution to happen.
As you can see that is to give us that the host is our DNS servers up in it so it scans different ports.
I think it sends thousand ports by default and then ninety nine ninety eight of these boards are on
the fringe that are behind firewall and these two ports which are open as to yes which is used for communication
and then domain name resolving.
I think it's 452.
This is used for DNS servers.
So these reports are open then you can communicate with the server using these ports.
OK.
So this is how you can access a host that are represented by their IP addresses.
Now if you want to scan the host in the local network you want to check if there is an host which is
available on your network or not.
And you can use and map smash on and map 1 9 2 1 6 8.
This is my local network.
So if I want to bring out there I can use 1 9 2 1 6 8 0 0 not 1 which is 3 Gateway as you can see that.
Now the result has returned quite quickly because it isn't in my own local network and you can see that
it has 998 ports which are closed and then it has two ports which are open.
So this is how you can get the host on your local network.
OK.
You can also search range of hosts for example and map 1 9 2 1 6 8 0 dot 1 and 2 let's say you want
to test first 30 hosts that you're going to find the range for example 1 to 30 and it will scan all
the networks that are active or running in between these strange.
So it will scan 13 networks and 30 hosts and then it will return the results which host up and running.
So next are this and wait for it to complete.
Okay.
Now the scanner is completed as you can see that there are certain hosts that are running.
So I'm scanning from one thing 30 and this is my gateway out of this which is look at that Zero Dark
one which is up and then I have a horse too which is a Linux machine which a soda is not a link switching
it's my phone which is that one line to that 160 but to do that.
And similarly then I have another Windows machine which is that Lemon and I have sorry this is my linux
machine.
This is my windows machine which is running on the virtual machine VM.
And then there is another host.
So these five four star up in these 13 is you can also search for a submarine for a subnet.
You can do it like this one slash 24.
So it will mask the last 16 years and last 24 bits and it will touch inside of these bits.
So let's start with 16 words.
So now this will Moscow the last 16 bits.
And then it will search in this subnet
and you can see we are starting starting to get answers for a different host.
So I'm going to stop my investigation.
So this is the you get your one and then zero dark ends Zero Dark alone and then zero dark thirty.
So it's scanned for host and then they cancel the execution.
So this is how you can search for different host in your own network and you can get their make addresses
except on different information which port for example which port is open and then you can use this
information for creating your attack.
OK.
So this is a command line interface for and map and map also has a very efficient what is called a graphical
interface.
So I'm going to.
And it's included in cleanings by default let's it's called then map
so you can write your commands here which I wrote in previous terminal order you can select different
options from here then try to work out with them for example if I want to bring mine to 168 that see
that 24.
So I'm going to see in this subnet with 24 bits and then I'm going to use a very quick scan because
I don't want to waste a lot of time.
You can also use a lot of different type of scans for example the regular scan quick scan things scan
in 10 scan but I'm just going to use a quick scan so I get my good and Skippy.
So now that map has started and it will start searching for host again now the whole scanning process
is done then you can see that 255 IP addresses for a site and five host to a phone active and these
are the hosts that are found active.
So a 0 1 0 or 10 0 alarms you were 13 and 0 30.
So now you can get different information them you can see that this graphical interface provides a much
more useful and easily understandable information.
And then you can build on top of this information to back the victim machine and you can also find touch
for a range of ports for example if you don't want to scan for all the ports who can just scan certain
ports for example you have to give the arguments minus B and then the number of ports for example.
I only want to search for the first hundred ports so I'm going to write this as like this and then I'm
going to search for this IP as you can see that it site the first hundred ports and they found out that
only 25 or port number 25 which is a simple DP e-mail port is open and you can use this port for attacking
the victim machines.
This is how you right.
Define the range of ports that you want to scan.
You can also I do if you want to scan all the ports in on the machine you can just write dash B dash
and they do it scan all the ports
and you can see that it gives us two ports that are open 20 5 9 0 2 and then 8 9 9 9.
You can also search for operating system on the machine for example if you want to search which is operating
system on this machine.
You can just try mine here.
And then the IP address of the host if you pass into
and my poor perform certain tasks to identify which type of operating system it is.
It may or may not return the correct results but it if its return needs most probably the operating
system is the same.
That is overturned by him.
So it's taking a lot of time but this is how you can use it
it's not performing certain tasks to determine which operating system it is
is.
So it's taking a lot of time.
I'm not going to let this go on forever.
This is essentially how you can run it.
You can read the documentation on the road map here.
It is always detection as you can see that this is minus all the lowest detection and you can give different
arguments to a touch for a different type of operating system.
So that said try and map.
See you next lecture.