Ethical Hacking Scanning Techniques

• Scanning is a crucial phase in ethical hacking to gather information about target systems, networks, or resources like web servers, email servers, file servers, etc.
• It helps identify potential vulnerabilities, entry points, and weaknesses in the system, aiding in both hacking and protecting the system.
• Scanning involves various types such as Network scan to identify other computers or servers on the same IP range and Port scanning to determine what services are running on each server.
• Each computer on a network has an IP address for location and multiple applications running, differentiated by port numbers (65,535 available ports).
• Understanding what services are running on a target system and which ports they are using is crucial to identifying potential vulnerabilities for hacking.
• Detailed host scanning is important to determine the operating system, software versions, and available services on the target host.
• Tools like nmap are used for fingerprinting, which helps in identifying the operating system based on variations in network message responses.
• Indirect ways of determining the operating system include analyzing how the system responds to login attempts, providing clues about the OS in use.
• Banner grabbing is a direct method that involves analyzing the banners or responses from a server to gather information about the operating system.
• Scanning plays a vital role in the overall hacking process, complementing earlier phases like OS int, reconnaissance, and footprinting.- The speaker explains how they conducted an NS lookup to find the IP address of a website, usb.Cloud, and used a DNS tool called dig to gather more information about the DNS.
• By utilizing the nmap command with the IP address, they discovered that ports 22 (SSH) and 80 (HTTP) were open on the network, indicating the presence of a web server and a secure shell for logging into the server.
• They probed port 22 using telnet and identified that the software running was SSH version 2.0, specifically OpenSSH 8.9, providing clues for potential vulnerabilities to exploit.
• The speaker performed banner grabbing on port 22 to determine the operating system (Linux 5.x 2.0) running on the server and confirmed it by using nmap to identify it as Amazon Web Services.
• Through nmap, they also received probabilities of the operating system being Linux 5.x 2.0 based on responses without connecting directly, showcasing advanced reconnaissance techniques.
• In exploring port 80 of the website, they discovered it was running on an Nginx server version 1.18 on Ubuntu Linux through header requests and further research on the web server.
• By utilizing tools like telnet and curl with specific commands, the speaker was able to gather detailed information about the network, services, and operating systems present, demonstrating effective information gathering techniques in ethical hacking.- The speaker discusses using tools like Curl, nmap, talet, and Curl for host scanning and network scanning.
• Vulnerability scanning involves tools like nmap, burp Suite, and nasus to detect weaknesses and vulnerabilities in systems.
• Tools like nmap, WireShark, and air crack NG are commonly used for network analysis and security testing.
• ICMP protocol is used for control messages in networks, including the ping command for testing network connectivity.
• The speaker explains how to perform a ping sweep using nmap to check multiple IP addresses for network connectivity.
• Different scanning tools like SQL map, ncto, and Snort are used for specific security testing purposes.
• The speaker emphasizes the importance of understanding network protocols like TCP, UDP, and ICMP for effective scanning and analysis.
• The lecture covers the concept of DMZ (Demilitarized Zone) in network security architecture.
• Vulnerability scanning tools like nasus and burp Suite are essential for identifying system weaknesses and known vulnerabilities.
• The speaker demonstrates how to use ping and nmap for basic network scanning and testing.
• Tools like John the Ripper are used for password cracking, while tools like nmap are used for network mapping.
• The speaker warns against unauthorized scanning of systems without consent and highlights the legal implications of such actions.

Explore the essential phase of scanning in ethical hacking, including network and port scanning, fingerprinting, banner grabbing, and advanced reconnaissance techniques. Learn the use of tools like nmap, telnet, Curl, and DNS tools for information gathering and vulnerability identification. Understand network protocols, DMZ, and the legal implications of unauthorized scanning.