Using Nmap: Changing the Source IP Address

Using nmap to change a source address. The commands used are:

nmap -iflist

...to get a list of available interfaces. When an interface is chosen (in this tutorial, eth0 is chosen) use the name of the interface in the next command:

nmap -e eth0 -S 192.168.1.100 192.168.1.109

...which will use the eth0 interface and spoof a source IP of 192.168.1.100, while scanning 192.168.1.109. Because the source address is spoofed, the return traffic from the target host will not be routed back to us. Thus, all ports will appear to be closed.

Using Nmap: Detecting a Remote OS

Using nmap to detect the operating system of a remote host. The command used is:

nmap 192.168.1.109 -sV -O

If the -O flag is the only one used, nmap will have less data to compare to it's known list of operating systems. Using -O with a known open service (as discovered in previous tutorials) it gives nmap more evidence to narrow down potential operating systems.

Using Nmap: Identifying Services

Using nmap to identify services on a host. Again, very easy. The command used is:

nmap 192.168.1.109 -sV

...this will communicate with the open ports, and compare the traffic to a small database in nmap with fingerprints of known services. In this video, an ubuntu webserver is discovered, which is true.

Using Nmap: Scanning a Host

Using Nmap to scan a host. Very simple. The command:

nmap 192.168.1.109

...is used to scan the host or interface with the IP address of 192.168.1.109. The results show us a service open on TCP port 80.

Using Nmap: Scanning a Network

Using nmap 4.20 to discover hosts on a network. The command:

nmap 192.168.1.0/24 -sP

...is run to discover hosts that respond to ping on the 192.168.1 network. The list that returns is a list of live hosts/interfaces on the network.

Greetings.

This is my blog. It will reflect my will. I will begin with videos on basic security tasks.