(NMAP: Lesson 4)

{ Create an Inventory File with nmap }

1. What is NMAP
   • Nmap (Network Mapper) is a security scanner used to discover hosts and services on a computer network, thus creating a "map" of the network. To accomplish its goal, Nmap sends specially crafted packets to the target host and then analyzes the responses. Unlike many simple port scanners that just send packets at some predefined constant rate, Nmap accounts for the network conditions (latency fluctuations, network congestion, the target interference with the scan) during the run.
   
   
2. Why Create an Inventory List?
   • One of the first stages of a Risk Assessment is to know what devices are on your network.  This lab will demonstrate how to create a very basic inventory list that can be later used to assess criticality and vulnerability.
    
3. Pre-Requisite
   • BackTrack: Lesson 1: Installing BackTrack 5 R1
   
   
4. Lab Notes
   • In this lab we will do the following:
     1. We will conduct a NMAP network scan using operating system detection.
     2. We will use a perl program to parse the nmap results and create an inventory list.
   
   
5. Legal Disclaimer
   • As a condition of your use of this Web site, you warrant to computersecuritystudent.com that you will not use this Web site for any purpose that is unlawful or that is prohibited by these terms, conditions, and notices.
   • In accordance with UCC § 2-316, this product is provided with "no warranties, either express or implied." The information contained is provided "as-is", with "no guarantee of merchantability."
   • In addition, this is a teaching website that does not condone malicious behavior of any kind.
   • Your are on notice, that continuing and/or using this lab outside your "own" test environment is considered malicious and is against the law.
   • © 2013 No content replication of any kind is allowed without express written permission.

1. Start Up VMWare Player
   • Instructions:
     1. Click the Start Button
     2. Type Vmplayer in the search box
     3. Click on Vmplayer
   • 

    

2. Open a Virtual Machine
   • Instructions:
     1. Click on Open a Virtual Machine
   • 

    

3. Open the BackTrack5R1 VM
   • Instructions:
     1. Navigate to where the BackTrack5R1 VM is located
     2. Click on on the BackTrack5R1 VM
     3. Click on the Open Button
   • 

    

4. Edit the BackTrack5R1 VM
   • Instructions:
     1. Select BackTrack5R1 VM
     2. Click Edit virtual machine settings
   • 

    

5. Edit Virtual Machine Settings
   • Instructions:
     1. Click on Network Adapter
     2. Click on the Bridged Radio button
     3. Click on the OK Button
   • 

    

6. Play the BackTrack5R1 VM
   • Instructions:
     1. Click on the BackTrack5R1 VM
     2. Click on Play virtual machine
   • 

1. Login to BackTrack
   • Instructions:
     1. Login: root
     2. Password: toor or <whatever you changed it to>.
   • 

    

2. Bring up the GNOME
   • Instructions:
     1. Type startx
   • 

    

1. Start up a terminal window
   • Instructions:
     1. Click on the Terminal Window
   • 

    

2. Obtain the IP Address
   • Instructions:
     1. ifconfig -a
   • Note(FYI):
     • My IP address 192.168.1.109.
     • In your case, it will probably be different.
     • Notice my mask is 255.255.255.0, which is a /24 network.
   • 

    

1. Create NMAP Data File
   • Instructions:
     1. mkdir -p NMAP
     2. cd NMAP/
     3. nmap -O 192.168.1.0/24 | tee nmap-test.txt
        • Replace the first three octets 192.168.1 with the first three octets of your IP Address obtain in (Section 3, Step 2).
        • Replace /24, with your network mask also obtain in (Section 3, Step 2).
   • Note(FYI):
     1. Make Directory called NMAP.
     2. Change Directory to NMAP
     3. Scan the entire 192.168.1.0 network using operating system detection.
   • 

    

2. Verify NMAP Data File
   • Instructions:
     1. ls -l nmap-test.txt
     2. head nmap-test.txt
   • Note(FYI):
     1. Long List file nmap-test.txt
     2. Show the first 10 lines of nmap-test.txt
   • 

1. Download NMAP Parser
   • Instructions:
     1. wget http://www.computersecuritystudent.com/SECURITY_TOOLS/NMAP/lesson3/parse_nmap.pl.TXT
     2. mv parse_nmap.pl.TXT parse_nmap.pl
     3. chmod 700 parse_nmap.pl
     4. perl -c parse_nmap.pl
   • Note(FYI):
     1. Wget is a free utility for non-interactive download of files from the Web
     2. Rename File from parse_nmap.pl.TXT to parse_nmap.pl
     3. Change the file permissions to where only the root user has read, write and execute permission.
     4. Check the syntax of the perl program
   • 

1. Generate Inventory List (Non-Verbose Mode) 
   • Instructions:
     1. ./parse_nmap.pl nmap-test.txt
   • Note(FYI):
     1. Supply the perl program (parse_nmap.pl) with the nmap file (nmap-test.txt) you created.
   • 

    

2. Generate Inventory List (Verbose Mode) 
   • Instructions:
     1. ./parse_nmap.pl nmap-test.txt -V
   • Note(FYI):
     1. Supply the perl program (parse_nmap.pl) with the nmap file (nmap-test.txt) you created and the verbose option (-V).
   • 
    
3. View Output File
   • Instructions:
     1. ls -l nmap-output.txt
     2. more nmap-output.txt
   • Notes(FYI):
     1. Long list the nmap-output.txt file.
     2.  More is a filter for paging through text one screenful at a time.
   • 

    

1. Proof of Lab
   • Instructions
     1. ls -l *nmap*
     2. date
     3. echo "Your Name"
        • Put in your actual name in place of "Your Name"
        • e.g., echo "John Gray"
   • Proof Of Lab Instructions:
     1. Press the <Ctrl> and <Alt> keys
     2. Press the <PrtScn> key
     3. Paste into a word document
     4. Upload to Moodle
   •