Welcome to this lecture in this lecture we're going to talk about the way in order to gather the information
before beginning to attack are B heard beginning to Pentecost.
Any applications are any client.
So first of all what is information gathering so information gathering is a technique that will help
you to explore about the claims.
So we'll get the maggot researchers who will get the IP addresses.
We'll get the boards that is opened in the client side.
We'll get the information of the operating system will get all the information that is aboard the open
board and basically the attacks that can be valid on the client.
Because if you even know the operating system that the client is using you can just get rid of all of
these payload that is not available on that operating system because if we just see that if I made the
attacks on the computer that is not discovered yet.
That means I have to make the whole lot of payload.
I have to make for the Mac.
I have to make for the Linux and I have to make for the windows.
And I had to try one by one.
But if I know directly that the way as is windows I can just get rid of all of these below that is not
required in the case of windows so that can be import information and second information is about IP
addresses.
So if you add in the same network you can get easily the IP addresses that is connected to the network
so you can just get the information directly.
You can work with the man in the middle attack.
You can just DNS is spoof you can just inject some of the key logger you can this make big framework
that is to exploit the browser on the client that is to gain access of Firefox on the client side or
any browser on the client side from the DNS or ERP spoofing.
So these other techniques and this is a very important topic because information gathering is not about
only the IP addresses and MAC addresses.
It will also give the information about the ports that is open.
So in this lecture we are not going to call or do anything the coding section will be in the latter
part of this course where we will just learn how to make this year and map scanner port scanner with
the help of Python programming language and that will be very interesting lecture because we are going
to make a whole yarn map scanner with the help of Python.
But in this lecture we're going to learn about this tool that is given with the college Linux.
So there are a couple of tools.
You can also see the net discover you can see the artery scan artery scan is a third party library it
doesn't completely stalled with the color next you have to download first artery scan and you have to
use it.
And the third one is the end map which is very popular.
So let's see this up this stool and this will be all about this Alexa.
So before that this makes sure you know about the information gathering and what we can get from the
client is very important before hacking to the client because we have to gain information about not
only the user.
We have to get information about the machine that the user is using.
So that will be very important in the first step you so take while hacking any computer.
So first of all what you need to do is allow this go to the terminal and we are going to use the first
and very easy method to discover the IP addresses and the MAC addresses that is connected to this network.
So that is the critical information that you can gather by the net discover.
So if you just see if I only get the information about the clients that are connected to my network
I can inject the key logo I can do multiple attacks using the man in the middle framework and blogging
that is given by the man in the middle.
So it is also important to know about the clients that is connected on the same network.
So that is done by this net discover.
So it is the way to use it if you want to help with this type help over here and you'll get all the
information about this net discover.
You can see we can just put this eye to this.
So that with the network interface it is.
And after that you can see over here.
And basically we have here that is are for the rains and this is to scan on the entire network.
So if I want to scan on this particular network I have to get the IP config and basically will just
give the reins.
So that entire range will be covered and any claim that is connected to the particular network will
be discovered by this net discover.
So let's see now.
We have seen the help and the bad imagery and the important barometer.
But here is a.
And then there is are so eyes for a network interface is for your rents.
So let's use this key what I I'm doing it is net discover.
And after that as this put I to specify the interface in my case it is the land.
You can also take away here if I have this great new window if config
and you can see we have this interface of land zero.
You can also use this to your zero interface which is the connectivity that is given by the actual network
on your computer.
So after that you can see that we have this new Discover.
So next thing is for the ends.
So I want to discover that is a client connected to this network.
That means I have to first give this a subnet which is 1 9 2 1 6 8 1 dot 1.
And after that if you want to cover that is from this sport to maybe two hundred fifty four more subnet
you have to give this range which is less 24.
So this will cover everything that is connected to your network.
So if I just sit into it is going to give us IP information.
It is going to give us the MAC address and the land and the Mac vendor are basically this is the MAC
address vendor.
So this is the company which is saying that this product is of race com and something like that.
So we can clearly see over here.
We have just discovered some of the networks which is giving us type addresses MAC addresses and this
is very useful information if we just gather this even the IP addresses it is going to be one of the
information and acoustical information for your man in the middle attack.
So after you got this gap that IP addresses you'll inject some cord or you can also inject some payload
directly to that IP address and you will execute that payload and make the complete assist to the client
computer to the reverse cell.
You can also put some updated information of fake or update information to the client by the men in
the middle attack and you can also get the SS to the client from that reverse cell.
So we'll discover this reversal or basically the way to connect to the client in the upcoming legs.
But for now you can see that we have gathered some information about the IP addresses and the MAC addresses
will see how to use them in the next lecture but for now you can see that this is the one tool which
is net discover and we're going to call this whole unless discover are basically in map whole and map
scanner body scanner replication throughout Python code and we'll just do that from scratch.
So we'll see how this work and how we can make use of the Python modules and packages to make this complete
application that is available in the calendar next.
So you could wonder that if there is already application way we're making it so here the important part
is if you make by yourself then it has more chances that it is not detected by the antivirus.
So it doesn't count.
In the case of the scanner but it counts in the case of the payload.
So if you make your own payload if you make your own biases if you make your own backdoor if you make
your own maybe the malware then it has less chance to be detected by the antivirus instead of making
the payload from this color to maybe using the some frameworks like the veil remote or eagle frame Morgan
something like that.
So instead of using that you can just make use of your own Python code your own authority to code your
own scripting code so that you can bypass as much as antivirus as you can and make your code and payload
much more effective so you can clearly see that we have this application which is showing us the IP
addresses in the MAC addresses.
So the next and important application that we're going to do here is the end map.
So it is very powerful application and it has so much surveillance to scan.
And basically what happens is we have the varieties of a scanning process that is inside the map and
we're going to code that each of the features that we can map with our Python code in the letters section
and have a legislative that so source for in map and you can see there is a gene map.
So first of all the search for this gene map.
So this is the application that is going to scan us every information of the line that is connected
to the computer.
Same is not discover but this gene map is much more advanced than discover.
So you can clearly see the joy interface.
So what you need to do is simply pass near the target.
So I want to discover again that is the same client that is connected to my network.
And in order to check for every client you just give these last 24 to copper every subnets of this network.
And after that you can see the command right here.
So it has created this come on automatically if we just put the target away here and here is a profile.
So it has so much a profile you can clearly see over here.
You have a penis scan which is similar to that of net discover.
It only give the information about the Mac addresses and the vendor.
It would give information about the IP.
And here is intense scan which is much more powerful.
You can also see the squeaky scan which is also powerful scan.
So first of all let's see for this being a scan you can see this scan button right next to it.
So let me press you
and you can clearly see that we just got our result within a second and it is because being a scan doesn't
take any much time and it is faster than net discover.
You can see we have the three gland that is connected.
One is our war network interface or basically our router.
And after that you can see here information one is Dexter and everything over here and the next is scan
is I want to take a quick scan and let me just scan it and it will take obviously the more time than
the penis scan because it is going to discover more information than that hoping his skin.
And this is very powerful scan.
So here you can clearly see we got a whole lot of information.
So it is giving what the vendor it is mac addresses in more detail and it is giving us this port that
that is opened in these muslin.
That means we can now source for the vulnerabilities on these services online and we can just make that
is the connection with the next spores type application or you can also use the MIT exploit to this
crack at that vulnerabilities and get past to this network.
So you can clearly see we just gather so much information from here you can see in here that is the
open ports that is available on this machine.
So this is a quick scan.
So let's go for these intensive scan and let's see what this will discover and it is going for now and
maybe scan first.
And it has been discovered in open board and you will see it has on for every horse that it has tried
so far the host that is not available it is doing who is down and the horse that is available it is
swinging hosed up.
So after that you can clearly see we are scanning the three worst.
It is still trying.
So it is initializing the OIS detection that means it all sorts which way is these clients are using
and you can clearly see this information are very critical.
It can be have or basically it has discovered some open board on our gateway and you can see here some
information it is is still it is running.
So it is still scanning for the to host.
And basically it is trying to gather the some information about the operating system.
So let's wait for some moment
so it is taking more time than we expected but it is going deep in order to get every inch promising
that it can uncover from the clients that is connected to our network.
So you could wonder that the way this information is so useful.
So these lines are basically the computer that is connected to your network.
So first thing what you can do with the IP is you can just be man in the middle that means you can work
is a router for the client and you say that I am a router to that client or to your window machine or
to the machine that you want to hack.
So that means every packet that is sent from the client is passed through you or through Caylee missing.
And every response is that the router give to the client is also from us.
That means we can just get every information that is parsed to the client.
So if the client send some information related to Facebook account.
If they pass the credentials of the Facebook that is passed through us.
So as you can get the estimable information you can just pass that information you can take information
from the get in a post method and it can be also done by the Web site and we'll learn about the Web
site and why it is so useful for the hacker in the next Alexa links to upcoming lesson.
But you can see now it is still the suit doing the processes and now we have got finally the information
and this is very very very important information you can write.
You can see right here it is giving you enough information that the version that you are enjoying.
It is working on the web server.
So it has correct every information that it can done.
And you can clearly see some of these text up information and be critical information to get more about
the ports and the vulnerabilities that is on the kind and they will see how to describe that in the
upcoming lecture.
So this will be there for this lecture.
So before wrapping.
This is the map or a Zen map.
And this is the whole lot of application this is very broad application and we're going to call this.
We're going to call the pings scan.
We're going to scan and for the intense scan and for the quick scan and this will be covered while we
just make the python code.
And this will be very interesting to them.
So this will be there for now.
And I think you have got the information about information gathering which information will be important
is based on the client.
So if you want to hack through social engineering toolkit then this information won't be too critical
but if you want to hack or if you want to get the vulnerabilities and the muscle indirectly then this
information is must.
So this will be a wrap for these lectures in the next one.