Target Enumeration 115
In this example to set the nmapFE scan to produce the same results as the
Linux terminal counterpart (nmap):
Change the default target of 127.0.0.1 to 172.16.1.40.
Change the Scanned Ports from Default to Range Given Below and enter 139.
Make sure only OS Detection is checked under Scan Extensions.
Click on the Options tab, select Decoy, and enter 24.213.28.234.
Click Scan.
116 Practical Hacking Techniques and Countermeasures
The results of the scan will be given.
Again, the sniffer from the target acknowledges the decoy IP address was
sent to the target.
The results from nmapFE are identical to the terminal version. Again,
nmapFE is only a front end for nmap.
Target Enumeration 117
Lab 19: Operating System Identification
Identify Target Operating System: NmapNT
Prerequisites: None
Countermeasures: Banner alteration, firewalls, Intrusion Detection System
(IDS)
Description: The nmapNT application can be used to identify the possible
operating system (OS) of the target. An attacker uses this information
to launch appropriate attacks for the results obtained. The difference
between nmapNT and Xprobe2 from Chapter 2 is that this application
allows the option of initiating a decoy IP address against the target.
Procedure: Install nmapNT drivers, nmapNT application and run against
the target.
nmap
(IP Address)
In order to use nmapNT on Windows you will most likely need to install
the drivers included with the application.
Pages:
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70