CYBERSECURITY. KALI/LINUX/META AND WIN 7. 2HRS

Table​ ​of​ ​Contents

Overview 3

Requirements 3

Tasks 3

Design 4

NMAP​ ​Basics 5

Information​ ​Gathering 5

Reflection 5

Overview Throughout​ ​this​ ​class​ ​we​ ​will​ ​use​ ​2​ ​Virtual​ ​machines. One​ ​machine​ ​will​ ​act​ ​as​ ​the​ ​attacker​ ​machine​ ​one​ ​machine​ ​will​ ​be​ ​the​ ​victim machine.​ ​​This​ ​will​ ​allow​ ​us​ ​to​ ​practice​ ​in​ ​a​ ​controlled​ ​environment,​ ​if​ ​you​ ​do not​ ​follow​ ​the​ ​instructions​ ​this​ ​can​ ​lead​ ​to​ ​your​ ​account​ ​being​ ​banned​ ​on Fordham’s​ ​Network.

Requirements ● The​ ​lab​ ​prep​ ​lab​ ​must​ ​have​ ​been​ ​completed​ ​before​ ​proceeding ● Ensure​ ​both​ ​network​ ​adapters​ ​on​ ​Kali​ ​and​ ​the​ ​Metasploitable​ ​virtual

machines​ ​are​ ​set​ ​to​ ​a​ ​private​ ​network​ ​or​ ​host​ ​only​ ​network​ ​depending​ ​on your​ ​virtual

o This​ ​ensures​ ​the​ ​traffic​ ​never​ ​leaves​ ​your​ ​laptop o Remember​ ​Fordham’s​ ​network​ ​does​ ​have​ ​security​ ​systems​ ​which​ ​can

flag​ ​your​ ​machine​ ​for​ ​malicious​ ​activity ● Metasploitable​ ​will​ ​be​ ​referred​ ​to​ ​as​ ​the​ ​target ● Document​ ​the​ ​IP​ ​addresses​ ​of​ ​each​ ​system

o Kali​ ​- o Metasploitable​ ​-

● Only​ ​run​ ​these​ ​commands​ ​against​ ​your​ ​target​ ​machine​ ​metasploitable! ● Scanning​ ​Fordham’s​ ​network​ ​will​ ​get​ ​you​ ​blocked. ● Use​ ​NMAP​ ​Commands​ ​from​ ​the​ ​presentation​ ​to​ ​complete​ ​the​ ​lab

Tasks ● Preform​ ​and​ ​document​ ​the​ ​steps​ ​outlined​ ​below ● Use​ ​the​ ​technical​ ​documentation​ ​examples​ ​as​ ​inspiration​ ​for​ ​formatting​ ​of

the​ ​lab​ ​document ● Reflection​ ​should​ ​be​ ​at​ ​least​ ​one​ ​page​ ​long

Design

NMAP​ ​Basics 1. Perform​ ​a​ ​SYN​ ​Scan 2. Preform​ ​a​ ​Connect​ ​Scan 3. Perform​ ​an​ ​XMAS​ ​Tree​ ​Scan 4. Scan​ ​the​ ​system​ ​to​ ​discover​ ​operating​ ​system 5. Run​ ​a​ ​scan​ ​to​ ​show​ ​service​ ​version 6. Run​ ​a​ ​scan​ ​using​ ​the​ ​text​ ​list​ ​option 7. Run​ ​the​ ​banner​ ​script 8. Output​ ​the​ ​results​ ​to​ ​a​ ​text​ ​file 9. Grep​ ​those​ ​results​ ​to​ ​find​ ​open​ ​ports 10. Run​ ​3​ ​more​ ​different​ ​scans​ ​and​ ​document​ ​the​ ​results

Information​ ​Gathering ● Which​ ​ports​ ​are​ ​open​ ​on​ ​the​ ​target? ● What​ ​version​ ​of​ ​SSH​ ​is​ ​the​ ​target​ ​running? ● What​ ​version​ ​of​ ​FTP​ ​is​ ​the​ ​target​ ​running? ● What​ ​is​ ​port​ ​5900​ ​used​ ​for​ ​on​ ​the​ ​target? ● What​ ​OS​ ​is​ ​running​ ​on​ ​the​ ​target? ● How​ ​could​ ​you​ ​run​ ​stealth​ ​scan​ ​on​ ​the​ ​target? ● What​ ​is​ ​some​ ​other​ ​information​ ​you​ ​gathered​ ​from​ ​NMAP

Reflection ● Why​ ​would​ ​you​ ​want​ ​to​ ​detect​ ​NMAP​ ​activity​ ​on​ ​your​ ​network? ● How​ ​can​ ​NMAP​ ​be​ ​used​ ​to​ ​troubleshoot? ● Why​ ​is​ ​this​ ​tool​ ​useful​ ​from​ ​a​ ​network​ ​perspective? ● Why​ ​is​ ​this​ ​tool​ ​useful​ ​from​ ​a​ ​security​ ​perspective?

Hint:

● https://pentestlab.wordpress.com/2012/08/17/nmap-cheat-sheet/ ● man​ ​nmap