In this saga, I'll show you how to scan your land using a technique called art scanning to understand
how this scan works, you have to deeply understand the protocol.
I'd recommend you to watch the video again, where I've explained in detail what our protocol is and
how it works.
Our scanning is especially useful if they are hosts on the network that want to remain hidden or stealthy
and that they do not respond to any requests like being disipio giddap scans.
There are a lot of firewalls that block any incoming pickets except AAFP, since AAP is not accountable
for this type of scanning works only on your local alarm, you can find wired or wireless hosts connected
to the same.
The first tool I'm going to show you is called Our Skin.
If it's not already installed on your system, you can install it using Apte or the package manager
of your Linux distribution to check if our Paskin is installed.
You can simply execute.
AAPS can come in.
Is first time becoming good?
All of these are good Cumming's.
And I'm executing the comment.
I can install it by executing APD told AAP minus Kim.
Let's see the help of the comment.
It has a lot of options, but one of the most useful is minus L or minus minus local net.
It will reduce the network address of its own interface and scan the entire limb.
You don't have to worry about submitting or getting the LAN address from the IP address and network
mask.
Let's start scanning is what I'm executing.
AAFP minus can an uppercase i.e. the name of the interface.
Let's check the interface.
Its name is ENP.
Zero is three.
In your case it can have another name so our minus can minus I n b zero.
S three and minus L take care of the option for the interface is minus I in uppercase or you can use
minus minus interface.
Instead it has scanned the network and this is the output.
These are the hosts on my LAN.
If you don't specify the interface, Harp's can will search the system interface for the last number
of configured up interface, excluding Loop Ozbek.
The output looks great, but our position is very noisy and the admin or an intrusion detection system
could find out very quickly that a scan is running.
If you want to be stealthier, you could use another tool called Net Discover.
This is both an active and passive AAFP reconnaissance tool, we'll discuss the active and passive modes
of operation in a minute.
Let's install a net, discover if you don't have it already, it's not installed.
A update and end AAPT install net discover.
Sorry only to impersonate science.
OK, it was installed now you can start a lot of skin simply by executing net discover, Hazrat Net
discover.
This is the active mode of operation where a net discover is actively sending out requests packets in
order to discover the other hosts on the network.
We've already noticed some hosts running continuously until you stop it by pressing on cue or control
plus see, I'm stopping it.
Other useful options are minus I and the name of the interface to sniff packets, and if no interface
is specified, the first one available will be used.
Another useful option is miners are used to scan a given range instead of auto scan, for example,
let's scan the entire subnetwork.
One hundred sixty eight data zero.
That is zero slash twenty four.
Scanning the entire summit.
OK, let's try a passive scan, if you want to rein it in passive mode, you just use A minus B option.
Like this.
If you enable the passive mode like shown in the example you are seeing right now, Netta discovered
does not send anything, it only sniffs the traffic.
In fact, it the monitors are requests sent by the other hosts on the network without sending anything,
remember that our request packets are sent to the broadcast address so each host on the lam receives
this package.
This technique is really stealthy and prevents you from being noticed by someone.
It's common practice to change your own Mac address before launching a passive scan.