All right, we're trying to get as much information as we can possible along
with being as elusive as possible and tying into the fact that we want to be
able to run wire shark on this.
Now, I'm going to run wire shark from the actual host system, which is what we
're using it. And as I swap over because I totally meant to do that and not miss
anything.
We're inside of our Kelly box and we're going to start up wire shark on this
particular host system.
The reason I'm only doing it from here and not inside of wire shark is because
wire shark is going to capture all the traffic going through all the devices
out there.
Since wire shark is the are excuse me, since Kelly is the one that's going to
be doing the scanning the wire shark that we have on the host system here is
going to be the one capturing traffic dedicated to this particular host.
And as we started up, I'm going to go ahead and put in the command that I want
to use as well to and I will have this command listed below because the first
thing that I point out is is we're using dash ST.
And that is a TCP connect port scan followed by dash are and the dash are if we
look at our cheat sheet that's going to be up on the top left in port
specification options.
It's going to be in sequential port order. So one to start with one and going
all the way up the list, followed by dash S V.
And that's going to give us the option to be able to go through and scan
according to our list.
On the version detection. Try to find the version of the service running on the
actual port. I want to try to keep it to where everything is on this actual
cheat sheet. So if you're playing at home or inside the lab.
You can actually see with reference what's going on here.
In addition to that, we're taking a look at dash T one on the bottom left. You
'll see under the timing options that this is a tricky scan to avoid IDS
detection.
And lastly, we're putting in our full class C subnet. Now, before I crank this
off, I'm going to go ahead and go into my options and make sure that we select
our subnet or and controller.
Network controller or that particular subnet, then I'm going to start my scan.
So that way I can make sure that both are going at the exact same time.
Now do keep in mind. This is probably going to take a little bit for not only
this virtual machine, but also if you're playing at home as well.
Because it's happened to go through the entirety of the subnet and is probably
talked to the dot zero first.
Or as you can see on right here, these tells are responses to see if anybody's
online or not.
I jumped around into the future in the actual video that we're working on right
now for our solution.
And you can see that we're having a lot of packets pop up.
Now at this point, I went ahead and stopped my wire shark while the in map is
still running because the whole point behind this challenge was to make sure
that we understood.
To actually be able to one running in map use our reference sheet and also be
able to run wire shark at the same time.
So that way we know we can capture at the exact same time we're running in map.
Now later on in this course, we're going to be learning other cool tools like
TCP dumps. We have less of a GUI overlay and starting it away from this actual
wire shark.
Capturing method. We use it to review, but we'll find different ways to
actually capture the traffic.
And take this time to inside of your own lab to go through and take a look and
see the differences between what's happening here on the side.
And also packets overall versus earlier in the skill when we have a lot of
errors pop up in our wire shark capture all.
Basically all it wants. What's the difference between the two.
And that's why we want to take a look at how to run this quietly and also
monitor it at the same time to avoid potential detection from IDS or IPS
systems.
This will be the baseline as how we move forward in terms of labs. I'm going to
try to make everything in sequential order.
And if we do something in one lab, we'll add it to the next and have it ready
for that next one.
But I also want you to be able to get familiar with those different types of
tools inside of Kelly as we start advancing our knowledge inside of pen testing
with Kelly.
I hope this has been informative for you and I'd like to thank you for viewing.