Now to further expand on what we were talking about as far as like you know
online offline access.
As you can see here this is where I actually do some of the recording at for
our skills together
and get into our labs. Now there's three different systems that are online in
this location right now
and at the desk right there. I have a KVM that allows me to be able to flip
back and forth.
The reason I bring this up is because sometimes those systems may not be reach
able from
different locations on the network. Well when we go through our example in map
scan here in just a
second we're going to be able to see that some of these systems identify and
pop up but some don't
and I'm going to show you one that won't. Now here we are in the limiteroom of
the very same house
that I'm temporarily in right now and you can see that there's some systems
back there that will
come up in our scan but one that may or may not come up in our scan is this
little laptop right here
that depending upon depending upon the peripherals plugged into it may or may
not be online whenever
our scan takes place. Why is that? Well as you can see right there that this
laptop has a dongle in
the back of it for wireless access. natively this laptop does not come with an
integrated
Wi-Fi card. Now there were many different reasons why this was and if I want to
be able to get on the
network at any given time I have to be able to either plug in physically with
RJ45 or use the
Wi-Fi adapter right here to tie into the network and that's okay but with this
system you can
clearly see that there's no catfib plugged into it and now when I take the dong
le out it no longer
has any kind of network access. So if I were to do a scan right now this system
wouldn't necessarily
pop up but the big thing to remember here is is that it is still online and
while it is online
or excuse me while it is still on and it does have capabilities we may need to
go and focus in on
our physical asset portion of the skill which is coming up next. We'll be going
more in depth with
N-Map/ZnMap here as the course continues but I just want to give you a brief
demonstration here
real quick. For instance first thing we have to do is understand the scope
within our rules of
engagement as far as the systems that we're allowed to test. On this particular
recording
system that I'm working on right now I could just do a IP config and see that I
'm on the 192.168.1
Class C 24-bit network. So I can go ahead and put that into my scope here
and of scan being 192.168.1.0/24 using CIDR notation and I can just do a very
quick scan inside of N-Map
and just go ahead and scan. Now this is going to take a little bit because as
we will learn
N-Map does a quick scan based on ICMP response and does a very quick touching
go kind of thing
to be able to determine which ports are exactly open on said systems and as I
go through and
look at the results of what we have inside of our N-Map I could see that we
already have one, two,
three, four, five, six, seven, eight systems showing up inside of our actual
initial scan.
Now depending on the online availability of those devices they may come up
again or they may not
because they're offline like that laptop is in the living room. So this is
something to remember
when we distinguish between online and offline availability and also keep it in
mind how we
address this pertaining to our exploit resources for those offline devices that
may never come up.