Ethical Hacking: Scanning Networks

Course details

After footprinting and reconnaissance, scanning is the second phase of information gathering that hackers use to size up a network. Network scans are a key tool in the arsenal of ethical hackers, who work to prevent attacks on an organizations infrastructure and data. This course investigates the scanning tools and techniques used to obtain information from a target system. Instructor Lisa Bock discusses the importance of scanning the network during an Ethical Hacking exercise. She covers host discovery methods and explains ways to identify open services and determine the OS on a host. In addition, Lisa outlines evasion techniques to use when scanning and presents anti-spoofing and scanning methods Note: The Ethical Hacking series maps to the 20 parts of the EC-Council Certified Ethical Hacker (CEH) exam (312_50) version 12.

Concepts

0. Introduction

01 - Scanning the LAN
02 - Discovering resources
03 - Hacking ethically
04 - Setting up your virtual network

1. Scanning Purpose and Methodology

05 - Roadmapping a scan
06 - Outlining the TCP flags
07 - Leveraging the TCP three-way handshake
08 - Summarizing scanning tools
09 - Discovering Nmap
10 - Using hping3

2. Discovering Hosts

11 - Locating network hosts
12 - Comparing ping scans
13 - Sending SYN and ACK scans
14 - Challenge - Identify a scanning signature
15 - Solution - Identify a scanning signature

3. Identifying Open Services

16 - Evaluating port scanning methods
17 - Scanning IPv6 networks
18 - Identifying listening hosts using SCTP
19 - Using SSDP for discovery
20 - Optimizing scans with Nmap Script Engine

4. Determining Operating Systems

21 - Fingerprinting the OS
22 - Using Wireshark for OS discovery
23 - Employing IPv6 fingerprinting
24 - Harnessing the TTL value
25 - Mapping the network using Nmap

5. Moving through the Network

26 - Generating less noise
27 - Understanding the idle scan
28 - Firewalking the network
29 - Implementing stealth scans

6. Avoiding Detection

30 - Manipulating packets
31 - Spoofing and cloaking
32 - Employing proxies
33 - Leveraging anonymizers

7. Counteracting Scanning

34 - Preventing scanning
35 - Detecting spoofing
36 - Challenge - Draw a network diagram
37 - Solution - Draw a network diagram
38 - Next steps

Ethical Hacking: Scanning Networks

Authors

Lisa Bock