Scanning
149
Once the scan has completed a results window will appear identifying the
number of IPs scanned, number of targets alive, and number of targets with
open ports.
In this example:
Port 21 (FTP [File Transfer Protocol]) is open.
Port 80 (Web) is open.
Port 139 (Windows Share) is open.
Port 445 (Windows Share) is open.
150
Practical Hacking Techniques and Countermeasures
Right-click on the IP address to bring up a menu; then select
OPEN
COMPUTER
, then
IN EXPLORER
.
In this example, the results revealed the following:
The Database directory is shared.
The Downloads directory is shared.
The Personal directory is shared.
There may be Printers shared on the target.
The Windows scheduler is running and may have tasks that can be
modified.
*Note:
This example demonstrates a target computer with unprotected shares on
the computer. Many unprotected shares are available on private and personal
networks, and many, many on the Internet.
If the shares ask you for a username/password when attempting to access
them, initiate a NULL session and try again. If the shared resources still ask,
then you must find the username/password for that resource by other means.
Scanning
151
Lab 30: Target Scan/Penetration
Scan Open Ports/Penetration Testing: LANguard
Prerequisites:
None
Countermeasures:
Host-based firewalls
Description:
The LANguard application not only scans a target for open
ports and services but has an integrated penetration testing feature that
looks for weaknesses in the target operating system (OS) by running
predefined scripts against the target.
Pages:
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81