If
you need to use a specific NIC you must disable all other NICs.
Target Enumeration 107
Lab 17: Target Connectivity/Route
Connectivity/Routing Test: Pathping
Prerequisites: None
Countermeasures: Deny ECHO/ICMP request/reply at the border router
Description: The pathping application is used by attackers to not only
verify the target but to view the route to the target. Many times the
connection just before the target is a router that attackers may find
useful to attack in addition to a computer.
Procedure: From a DOS prompt type the following with the syntax of:
pathping (IP Address or Hostname)
108 Practical Hacking Techniques and Countermeasures
The first result you will see is the route (hops) to the target along with the
associated IP address of each hop.
The utility then calculates the statistics for each hop along the route.
Remember that many times next to the last hop, in this case 216.239.49.226,
is a router. Routers make excellent targets when they are not properly secured.
Target Enumeration 109
Lab 18: Operating System Identification
Identify Target Operating System: Nmap/nmapFE
Prerequisites: None
Countermeasures: Banner alteration, firewalls, Intrusion Detection
System (IDS)
Description: The nmap/nmapFE applications can be used to identify the
possible operating system (OS) of the target. An attacker uses this
information to launch appropriate attacks for the results obtained. The
difference between nmap and Xprobe2 from Chapter 2 is that this
application allows the option of initiating a decoy IP address against
the target.
Pages:
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67