Sinisterly
[Kali Linux] Get access, Find and attack into a network - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.ly/Forum-Tutorials)
+--- Thread: [Kali Linux] Get access, Find and attack into a network (/Thread-Kali-Linux-Get-access-Find-and-attack-into-a-network)

Pages: 1 2 3 4 5 6

RE: [Tutorial] Find potential targets and informations on your network - snowblind956 - 01-17-2013

Excellent tutorial! I'm sure it will really help a lot of people. I'd like to offer a couple tips for finding out what's on your network, you can feel free to just ignore me if you'd like. I use fping to do a ping sweep of my target network, and I use several nmap commands to port scan. To ping sweep a range I use this command:
Code:
fping -a -g 192.168.0.1 192.168.0.254>filename.txt
This scans a whole subnet and makes a nice clean text file for our results. For my nmap syn scan i use:
Code:
nmap -p- -PN 192.168.0.10
to scan a single ip. Without the -p- nmap only scans the 1000 most common ports, and -PN skips the host discovery and just scans all ports as if they were alive. This takes a little longer but it's more thorough. Also don't forget to scan for UDP as well as TCP with at least this:
Code:
nmap -sUV 192.168.0.10
I don't use all of the extra's for udp only because it does take a lot longer than tcp, and if you're feeling like you could find more i urge you to look up different kinds of scans such as xmas and null. Also don't forget to vulnerability scan with a vulnerability scanner like nessus, nexpose, or openvas!

RE: [Tutorial] Find potential targets and informations on your network - snowblind956 - 01-17-2013

Excellent tutorial! I'm sure it will really help a lot of people. I'd like to offer a couple tips for finding out what's on your network, you can feel free to just ignore me if you'd like. I use fping to do a ping sweep of my target network, and I use several nmap commands to port scan. To ping sweep a range I use this command:
Code:
fping -a -g 192.168.0.1 192.168.0.254>filename.txt
This scans a whole subnet and makes a nice clean text file for our results. For my nmap syn scan i use:
Code:
nmap -p- -PN 192.168.0.10
to scan a single ip. Without the -p- nmap only scans the 1000 most common ports, and -PN skips the host discovery and just scans all ports as if they were alive. This takes a little longer but it's more thorough. Also don't forget to scan for UDP as well as TCP with at least this:
Code:
nmap -sUV 192.168.0.10
I don't use all of the extra's for udp only because it does take a lot longer than tcp, and if you're feeling like you could find more i urge you to look up different kinds of scans such as xmas and null. Also don't forget to vulnerability scan with a vulnerability scanner like nessus, nexpose, or openvas!

RE: [Tutorial] Find potential targets and informations on your network - hunt3r972 - 01-18-2013

Yes of course I know the fping method. It's another way to do it. I try to find the most simple and effective methode to scan a network on linux distros but I still didn't find it. But on windows, Angry IP Scanner is pretty good at this. I started watching cain and abel. Maybe I'll do a tutorial about this one.

For the moment, the best way to find node for me is the etherape methode. I'm tired of ettercap, it's never stable :-/

RE: [Tutorial] Find potential targets and informations on your network - hunt3r972 - 01-18-2013

Yes of course I know the fping method. It's another way to do it. I try to find the most simple and effective methode to scan a network on linux distros but I still didn't find it. But on windows, Angry IP Scanner is pretty good at this. I started watching cain and abel. Maybe I'll do a tutorial about this one.

For the moment, the best way to find node for me is the etherape methode. I'm tired of ettercap, it's never stable :-/

RE: [Tutorial] Find potential targets and informations on your network - hunt3r972 - 01-18-2013

Yes of course I know the fping method. It's another way to do it. I try to find the most simple and effective methode to scan a network on linux distros but I still didn't find it. But on windows, Angry IP Scanner is pretty good at this. I started watching cain and abel. Maybe I'll do a tutorial about this one.

For the moment, the best way to find node for me is the etherape methode. I'm tired of ettercap, it's never stable :-/

RE: [Tutorial] Find potential targets and informations on your network - hunt3r972 - 01-18-2013

Well, good news ! You can install Angry IP scanner through a .deb file on backtrack and use it. I add a part about this one in the tutorial

NEWS: I ADDED THE EVIL TWIN METHOD MANUAL. I TRIED IT AND IT WORKS FINE.

RE: [Tutorial] Find potential targets and informations on your network - hunt3r972 - 01-18-2013

Well, good news ! You can install Angry IP scanner through a .deb file on backtrack and use it. I add a part about this one in the tutorial

NEWS: I ADDED THE EVIL TWIN METHOD MANUAL. I TRIED IT AND IT WORKS FINE.

RE: [Tutorial] Find potential targets and informations on your network - hunt3r972 - 01-18-2013

Well, good news ! You can install Angry IP scanner through a .deb file on backtrack and use it. I add a part about this one in the tutorial

NEWS: I ADDED THE EVIL TWIN METHOD MANUAL. I TRIED IT AND IT WORKS FINE.

RE: Basic Tutorial: Get access, Find and attack into a network - hunt3r972 - 03-23-2013

Thread updated with some interesting informations ^^

RE: Basic Tutorial: Get access, Find and attack into a network - hunt3r972 - 03-23-2013

Thread updated with some interesting informations ^^