Project 5 - Ping Sweeps

Network Ping Sweeps Using nmap


Nmap ("Network Mapper") is a free and open source utility for network exploration and/or security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime.


Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics.


It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and both console and graphical versions are available.


Exercise 1:


1. From a BackTrack shell, type the following (only type what's in bold):
user1@pentest:~# nmap -sP -v class_IP_range/24 > /root/ceh/ps1


Syntax breakdown:
nmap: program name
-sP: program option for ping sweep
-v: verbose mode
class_IP_range/24: replace class_IP_range with the network block to scan (e.g., 10.10.10.0/24)
> /root/ceh/ps1: redirect the output to a file called ps1 in the /root/ceh directory


2. Examine your results:
user1@pentest:~#cat /root/ceh/ps1 | less


3. In the output, look for the text “Host is up” and record these systems’ IP addresses


4.  Email your results to proflheureux@gmail.com.

hi guys....this is Marie

I'm posting this here because I know Monica and Jamie will get it this way :)

I won't be in today, so if I missed anything huge, let me know? I fell on my front stairs last night and spent 12 hours in the hospital getting repeated cat scans, because I had a VERY nasty concussion and a head wound. If it is needed for any reason, I have the hospital paperwork. They have me on a week of anti seizure meds so I'm not feeling so hot. anti-seizure med. They suggested I spend most of today resting, so...I will be. Thanks! Sorry for the unusual approach of communication, but at least I know the message will get to the right people.

micro expression

http://www.social-engineer.org/framework/Psychological_Principles:_Micro-Expressions

In case you are not familiar with this, it is being able to detect minute, FAST expression and hints in body language that help you to read a person, and the intent they have, as well as recognize trust, and lying. Works well with NLP if you have the knack.

Chapter 4 and 5 Homework

Complete Activities 4-1 through 4-6, and Activities 5-1 through 5-4 at home using the Backtrack CD that comes with the textbook.  Use screenshots or snips to demonstrate that you completed each activity.  These assignments will be due on the date of the exam for these Chapters.

Your target cannot be anyone you already know.


1. Get someone's workplace.

2. Get someone to stay on the train or get off the train at a different stop than they planned.

3. Get someone to buy you something.  It can be a drink or food item but doesn't have to be.  Try really hard not to just ASK them outright to buy you something.

4. Find out someone's commute--times, trains, car route, etc. 

5. Get someone's phone number.  Pretexts are helpful here. 

6. Get someone's schedule tomorrow, down to the hours. 

7. Follow a target for at least ten blocks in downtown Boston without the target's noticing.

8. Get someone to ask for YOUR phone number.  Don't just give it to them; make them ASK.

9. Get someone to go somewhere with you where THEY WEREN'T PLANNING TO GO.

Reply to this BY MONDAY:
Post a comment to this post.  Find a YouTube/Vimeo/etc. clip from a movie or TV show illustrating social engineering, defined as gathering information or manipulating people IN FACE-TO-FACE situations or on the phone.  (No porn, please.)  Identify the techniques of social engineering you see in the clip.  What makes them effective?  How would you use those techniques in your life?

Project 4

What You Will Need

·         A computer Windows 7 (or Windows XP, or Vista)

·         Administrator privileges

·         The instructions assume you are using Windows 7

Downloading and Installing the Gnu Privacy Guard

1.             The Gnu Privacy Guard is a software package that generates keys and encrypts data.

2.             Open a Web browser and go to ftp://ftp.gnupg.org/gcrypt/binary

3.             Scroll down and find the latest Windows version--when I wrote this, it was gupg-w32cli=1.4.9.exe.

4.             Download the EXE file.  Save the file on your desktop.

5.             On your desktop, double-click the installer file and install the software with the default options.

Enabling IMAP

6.       Log on to gmail.

7.             IMAP is Internet Message Access Protocol, and we will use it to connect Thunderbird to Gmail.

8.             You should now be logged in to Gmail. On the upper right, click Settings.

9.         On the Settings page, click "Forwarding and POP/IMAP".  In the "IMAP Access" section, click "Enable IMAP", as shown to the right on this page.  Click "Save Changes".

Downloading and Installing Thunderbird

11.         Thunderbird is an email client.

12.         Open a Web browser and go to getthunderbird.com

13.         Click the "Free Download" button, as shown to the right on this page.  Download the software and install it with the default options.

Configuring Thunderbird

14.         After installation, Thunderbird launches automatically.

15.         In the "Import Settings and Mail Folders" box, check the "Don't import anything" box and  click Next.

16.         In the "Mail Account Setup" box, enter you’re the requested information and click Continue.  Note:if you are using a real email account on a public computer, don't check the "Remember password" box.

17.         Thunderbird should automatically configure your email account, so both the Incoming and Outgoing mail servers show green dots, as shown to the right on this page.  If that doesn't work, check your user name and password.

18.         When both dots are green, click the "Create Account" button.

19.         In the "System Integration" box, click OK.

20.         You should now see your inbox in Thunderbird.

Installing Enigmail

21.         Enigmail is a Thunderbird add-on that allows you to use Gnu PG to encrypt your email.

22.         At the top of the Thunderbird window, click Tools, Add-ons.

23.         In the Add-ons box, type enigmail into the search box and press Enter.  Enigmail is found, as shown to the right on this page.  Click the "Add to Thuinderbird…" button.

24.         Click the "Install Now" button.  Wait while the software downloads and installs.

25.         When you see the "Install Complete" message, click the "Restart Thunderbird" button.

Using the Enigmail Key Generation Wizard

26.         At the top of the Thunderbird window, click OpenPGP, "Key Management"

27.         In the "Welcome to the OpenPGP Setup Wizard" box, click Next.

28.         In the Signing box, click Next.

29.         In the Encryption box, click Next.

30.         In the Preferences box, click Next.

31.         In the "Create Key" box, type a passphrase of your choice into both boxes and click Next.

32.         In the Summary box, click Next.

33.         A "Key Creation" box appears.  You need to use your computer for something else for a while to create randomness.  When the key management process is done, you will see an "OpenPGP Confirm" box, as shown below on this page.

34.         Click Skip.  Click Finish.

Publishing Your Public Key

35.         No one can send you encrypted email unless you put your public key on a server where people can find it.

36.         In the "OpenPGP Key Management" window, type your email address into the search box.  Your key should appear in  the lower pane, with a Key ID, as shown below on this page

37.         Right-click your key ID and click "Upload public keys to keyserver". 

38.         In the "Select Keyserver" box, click OK.

Importing Proflheureux's Public Key

39.         In the "OpenPGP Key Management" window, click Keyserver, "Search for Keys". 

40.         In the "Select Keyserver" box, type proflheureux@gmail.com and click OK.

41.         A "Found Keys" box pops up.  Check proflheureux@gmail.com and click OK.

42.         In the "OpenPGP Alert" box, click OK.

43.         Your "OpenPGP Key Management" box should now show two keys: one for you, and one for Sam.  Close the "OpenPGP Key Management" box.

Sending an Encrypted Email

44.         In Thunderbird, click the Write button.

45.         Compose an email to these two recipients:

·                proflheureux@gmail.com

·                Yourself at any email address you use

46.         Enter a Subject of "Project 4 from YOUR NAME", replacing YOUR NAME with your own name.

47.         Put some text in the body of the message, such as "Hello!".

48.         On the menu bar, click OpenPGP, "Encrypt Message".

49.         Click Send.

50.         In the "OpenPGP Key Selection" box, click OK.

51.         In the "OpenPGP Confirm" box, click Continue.

52.         You're done.