Let's move ahead and take a look at a map which comes from Network Mappa and is a network discovery
and security auditing tool widely used by network administrators for many types of scanning.
It's a complex open source application that maybe deserves its own dedicated course, in my opinion.
There are a variety of skills that can be performed using and I want to mention just a few of them.
DCP, since Cannes is the default and the most popular Cannes option for good reasons, it can be performed
quickly, scanning thousands of pork's per second on a fast network if there are no firewalls that restrict
the scanning.
It is also an obstructive and stealthy, since it may have complex disipio connections.
This technique is often referred to as half open scanning because it doesn't open a full DCP connection.
And since I seen it as if it is going to open a real connection and then wait for a response or a scene
and an acknowledgement indicates that the party is listening.
So it's open dialogue, he said, indicates that the port is closed.
If no response is received, the port is marked as filtered.
Keep in mind that you need the good privileges to perform this type of skin.
If you don't have privileges, you can still perform another type of DCP scanning called DCP Connect
Scan.
Let's go to the terminal and see some examples.
First, let's check if any map is installed by executing and map without any option.
And it says command and map not found and gives instructions about how to install it on Debian and Ubuntu
based distributions, you can install it by simply running app to install and map.
And it's done.
You can also install an app for Windows or Mac, and if you want a graphical interface, install Zend
map, which is the official and MAP Security Scanner GUI.
This is Zeynep.
Let's try a Tsipi scan, if you are rude, this will be the default scanning type.
I'm good and map and the IP address of the other Linux machine.
And we see a lot of information about the scam and the destination host.
We see how much time the scan took the Mac address of the destination host and the open ports.
By default and cancer, the most common one thousand parts for each protocol, DCP and UDP, we see
that for parks are open and 996 closed ports.
If you are not told, you cannot perform this, Kim.
I open up another terminal where I don't have good privileges and try to scan the host again, this
time specifying minus S.
S, which indicates A in skin.
And map minus is a lower case s and an uppercase S and the IP address of the destination.
And it says that I don't have the required privileges, what I can do is to perform another type of
DCP scam called Connect Skin.
This is the default for Nanako to users.
I simply ran and map and the IP address of the destination.
Or I can specify minus S and an upper the X the same.
Earlier, I said that by default and scans the most common one thousand pork's for each protocol, a
service has been moved to a non-standard port like SSX is listening on Port fifty thousand five.
On the destination, let's change the stage demon listening port to fifty thousand five.
This is the configuration file of SSX one, and I'll write Port and the New Will.
Fifty thousand five.
Next, the Newport.
I'm saving the file and then restart the service.
Now, SSX is listening on part fifty thousand five.
And MAP will not scan the port by default, and you cannot discover that the service is running, let's
scan the destination again.
And we don't see that SFH is running.
It didn't display the parties being open.
In fact, it didn't scan the port at all.
What I can do is specify the port of manually using A minus B option.
Let's scan the target again and specify the path, the manually and map minus B and the parts I want
to scan, let's say 20, 20 to 80 and 50 thousand five.
And the destination, the same IP address.
Perfect.
Pork's 20 and 22 are closed and 80 and 50 thousand five are open.
We see that the party is open, but it doesn't see who's listening on the port, what I can do now is
add another option that does version detection and Vieques minus S.
V.
So minus with an upper case V.
And it's much better it's displaying a lot of information about the services that are running on those
ports.
And if you want to scan all ports, you use minus B minus option like this.
Scanning all ports.
By the way, this can take a very long time if you press the enter key while scanning, it will say
what percent of the entire scan process has been already performed and it's done five percent.
I'm stopping and map by pressing control, plus see.
This was all about DCP Scamps.
Other types of scanners you can perform are UDP and ICMP scans, UTP worth scanning is generally slower
and more difficult than Tsipi UDP port scanning is activated with the minus ESU option.
And map miners as you localhost.
I'm scanning the localhost for you, Deports.
And this is the result, and to perform on ICMP, beings can use minus GNH or minus Espie and minus
S and both letters are lowercase.
And I'll skin an entire network.
And it has displayed information about all hosts that are up in this network.
This is the local area network.
OK, this is all about and for the moment, there's a lot of information about AMAP, but I think they
are the most important things you should know.
I'll take text to this lecture some resources about and map in case you want to dive deeper into it.
Thank you.