Operating systen & Version detection with NMAP-ii

Operating systen & Version detection with NMAP

these options can help us to gain more information about target. Most widely used function is operating system identification [-o] , used to identify O Srunning on the target machine.

msf > nmap -O 192.168.2.108

[*] exec: nmap -O 192.168.2.108

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-29 18:18 IST

Nmap scan report for 192.168.2.108

Host is up (0.013s latency).

Not shown: 986 closed ports

PORT STATE SERVICE

80/tcp open http

135/tcp open msrpc

139/tcp open netbios-ssn

445/tcp open microsoft-ds

1688/tcp open nsjtp-data

2869/tcp open icslap

3306/tcp open mysql

5357/tcp open wsdapi

49152/tcp open unknown

49153/tcp open unknown

49154/tcp open unknown

49155/tcp open unknown

49157/tcp open unknown

49158/tcp open unknown

MAC Address: 7C:E9:D3:34:4A:40 (Hon Hai Precision Ind. Co.)

Device type: general purpose

Running: Microsoft Windows 7|2008

OS CPE: cpe:/o:microsoft:windows_7::- cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_8

OS details: Microsoft Windows 7 SP0 - SP1, Windows Server 2008 SP1, or Windows 8

Network Distance: 1 hop

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 3.53 seconds

the other widely used Nmap option is version detection (-sV) of different open ports on the target. It can be mixxed with any of the scan types.

msf > nmap -sT -sV 192.168.2.105

[*] exec: nmap -sT -sV 192.168.2.105

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-29 18:39 IST

Nmap scan report for 192.168.2.105

Host is up (0.019s latency).

Not shown: 996 closed ports

PORT STATE SERVICE VERSION

21/tcp open ftp?

135/tcp open msrpc Microsoft Windows RPC

139/tcp open netbios-ssn

445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds

1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :

SF-Port21-TCP:V=6.25%I=7%D=7/29%Time=51F6698B%P=x86_64-unknown-linux-gnu%r

SF:(NULL,17,"220\x20220\x20RMNetwork\x20FTP\r\n");

MAC Address: 00:03:47:62:8A:9E (Intel)

Service Info: Host: 220; OS: Windows; CPE: cpe:/o:microsoft:windows

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 8.67 seconds

Port scanning with NMAP-1

Port scanning with NMAP

port scanning is active information gathering technique. Namp is used for port scanning & we will analyze the various scan techniques in detail./

Nmap provides lots of different modes for scanning the target machines. Here we will focus on four scans types namelt TCP connect scan , SYN Stealth scan , UDP scan and ACK scan. Let us move ahead and start vthe scanning process.

TCP connect scan :- is a basic & default scan of nmp. It follow three way handshake process to detect ports of target. Lets perform this to scan :-

root@debian:~# nmap -sT -p1-10000 192.168.2.46

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-29 13:34 IST

Nmap scan report for 192.168.2.46

Host is up (0.0015s latency).

Not shown: 9997 filtered ports

PORT STATE SERVICE

135/tcp open msrpc

139/tcp open netbios-ssn

445/tcp open microsoft-ds

MAC Address: 20:CF:30:CB:29:45 (Asustek Computer)

Nmap done: 1 IP address (1 host up) scanned in 37.50 seconds

-sT parameter denotes that we want to perform TCP connect scan

-p parameter showa the rangr of ports we want to scan.

SYN scan :- is considered as stealth scanning as it never forms a complete sconnection between the target and scanner. It is also called half open scanning.

root@debian:~# nmap -sS 192.168.2.46

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-29 13:46 IST

Nmap scan report for 192.168.2.46

Host is up (0.00061s latency).

Not shown: 997 filtered ports

PORT STATE SERVICE

135/tcp open msrpc

139/tcp open netbios-ssn

445/tcp open microsoft-ds

MAC Address: 20:CF:30:CB:29:45 (Asustek Computer)

Nmap done: 1 IP address (1 host up) scanned in 17.80 seconds

UDP scan :- is the techniques to identify open UDP ports on target.0-byte UDP packets are sent to the target & the recipient ofan ICMP port unreachable message shows the port is closed other wise considered open.

root@debian:~# nmap -sU 192.168.2.46

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-29 13:52 IST

Nmap scan report for 192.168.2.46

Host is up (0.00065s latency).

Not shown: 999 open|filtered ports

PORT STATE SERVICE

137/udp open netbios-ns

MAC Address: 20:CF:30:CB:29:45 (Asustek Computer)

Nmap done: 1 IP address (1 host up) scanned in 19.53 seconds

ACK scan:- is a special scan which tells which ports are filtered or unfiltered by a firewall. It operates by sending TCP ACK frames to a remote port. If there is no response then it considered to be a filtered port. If the target returns an RST packet then the port is considered to be unfiltered port.

root@debian:~# nmap -sA 192.168.2.46

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-29 13:57 IST

Nmap scan report for 192.168.2.46

Host is up (0.00020s latency).

All 1000 scanned ports on 192.168.2.46 are filtered

MAC Address: 20:CF:30:CB:29:45 (Asustek Computer)

Nmap done: 1 IP address (1 host up) scanned in 34.15 seconds

How To Reveal Hidden Passwords (Asterisks) In Web Browsers

Passwords are usually shown in the the form of asterisk (*) or the dots on each and every online site. We often wonder that there was a way to change the dots into the real characters. Actually, there is!! This trick is based on inspecting the element code and the slightest of modification.

Here i will be telling you this only about Facebook but once you get to know this method you can do this on any site. And also this method is only applicable on Google chrome and Mozilla Firefox only.

STEPS :

GOOGLE CHROME : 

1. Open google chrome and then open the site (In this case Facebook).

2. Check if there are asterisks or dots in the password box.

3. If there are, right click anywhere between the password and click inspect element.

4. A half element window will open up in it, on bottom side of the element window you will see input type ="password".

5. Select the word "password" here and replace it with the word "text" so that it becomes input type ="text" and press Enter.

6. Now you can see the password instead of dots.

MOZILLA FIREFOX :

1. Open Firefox.


2. Download & install the InspectThis Add-on and restart firefox.

3. Download & install the DOM Inspector Add-on and restart firefox again.

4. Open the site (In this case Facebook).




5. Check if there are asterisks or dots in the password box.

6. If there are, right click anywhere between the password and click inspect element.

7. A new window will pop up named DOM Inspector, in this window in the attributes under the value tab  "password" will be written. Double click on password.

8. An Edit Attribute window will pop out, Replace the node value "password" with "text". Click OK.

9. Close the DOM Inspector and you can see the Dots Replaced With Texts.

How to Reset Your Forgotten Windows Password the Easy Way

How to Reset Your Forgotten Windows Password the Easy Way

Forgetting your password is never any fun, but luckily there’s a really easy way to reset the password. All you need is a copy of the Windows installation disk and one simple command line trick.

Resetting Your Forgotten Windows Password

Boot off the Windows disk and select the “Repair your computer” option from the lower left-hand corner.

Follow through until you get to the option to open the Command Prompt, which you’ll want to select.

First you’ll want to type in the following command to backup the original sticky keys file:

copy c:\windows\system32\sethc.exe c:\

Then you’ll copy the command prompt executable (cmd.exe) over top of the sticky keys executable:

copy c:\windows\system32\cmd.exe c:\windows\system32\sethc.exe

Now you can reboot the PC.

Resetting the Password

Once you get to the login screen, hit the Shift key 5 times, and you’ll see an administrator mode command prompt.

Now to reset the password—just type the following command, replacing the username and password with the combination you want:

net user geek MyNewPassword

That’s all there is to it. Now you can login.
Of course, you’ll probably want to put the original sethc.exe file back, which you can do by rebooting into the installation CD, opening the command prompt, and copying the c:\sethc.exe file back to c:\windows\system32\sethc.exe.

How to Change a Computer Password Using Command Prompt

1. Reboot the computer
   
   
2. 2
   Right after the bios is finished, hit F8 (or F2,F10,F12)
   
   
3. 3
   Select 'Safe mode' or 'Safe mode with networking support'
   
   
4. 4
   Windows will boot up to the logon screen. Click administrator, 9/10 there is no password.
   
   
5. 5
   Open Command Prompt. You can go to Start > Run and type cmd.exe or simply search for cmd using the Windows search function.
   
   
6. 6
   Type net user and press Enter. This will bring up a list of user accounts. Look here for the name and exact spelling of the account whose password you wish to change.
   
   
7. 7
   Type net user name goes here *. Do not neglect any of the spaces (particularly the one before the *) or the command won’t work.
   
   
8. 8
   Press Enter. Once submitted, the command will give you the option of typing a new password for the user.
   
   
9. 9
   Carefully type the desired password and press Enter. The characters will not display as you type, so make sure the Caps Lock isn’t on and be very thorough with the spelling and punctuation.
   
   
10. 10
    Retype the password to confirm. This should weed out any typos.
    
    
11. 11
    Press Enter. The new password should go into effect immediately. If you get an error message or your access is denied, the account you’re working on doesn’t have high enough authorization to change any passwords. See Tips for possible solutions.
    
    

Windows 7: Manually Activating with command

1. Open Command Prompt with Administrative Privileges:  (Type "cmd" into the search box.  right-click on cmd and select "Run as administrator".)    

Note:  See detailed instructions on Opening the Command Prompt as an Administrator in Windows 7.

2. When the DOS prompt appears:

Type in:  c:\windows\system32  and press the Enter key.

Type in:  cscript \windows\system32\slmgr.vbs /ato  and press the Enter key.

(IMPORTANT:  You must type in the command exactly as shown, including spaces.) 

 

3. The results of running this command will be an Output Message: 

• If the output message says 'Product activated successfully', then the product activated successfully.
   
• If the output message DOES NOT say 'Product activated successfully', do the following:

1.  Make a note of the error code that is generated in the Command Prompt window.

2.  Refer to Windows 7: Activation Troubleshooting to find out how to resolve the error code.

3.  Try activating Windows again.   (Return to Step 1.)

4. Following these steps will activate Windows 7 for 180-days.  After this 180-day time period, you will need to complete these steps again to reactivate. 

M S Dos External commands

Networking, Wireless, and Mobility Connect to a network or the Internet. To open Click the network icon in the System Tray --àConnect or disconnect Control Panel--à[Network and Internet]-à Connect to a network Control Panel-à[Network and Internet]-à Network and Sharing Center-àConnect to a network Description Once you've set up a network connection, use the "Connect to a network" screen to connect to any networkwired, wireless, VPN, or dial-up. Connecting is straightforward: double-click the network to which you want to connect, or highlight it and click Connect. When you're connected to a network, disconnect from it by clicking Disconnect. This screen is primarily designed for wireless, dial-up, and VPN connections. If your only connection to a network is via an Ethernet cable, you won't even get to the screen when you choose to connect. Instead, you'll be told that you're already connected to the network. Want to disconnect? There's a simple, physical solution for youunplug your Ethernet cable. Configure and manage your network connections. To open Control Panel [Network and Internet] Network and Sharing Center Manage network connections Command prompt ncpa.cpl Description Manage Network Connections is actually a specialized folder that lists and provides details about all of your network connections, and lets you configure and manage them. Click any network connection and a toolbar appears that lets you take a variety of actions on the connection, including connecting it, disabling the network device, renaming the connection, viewing the status of the connection, changing the connection's settings, and diagnosing problems with the connection. Configure and manage wireless networks. To open Control Panel [Network and Internet] Network and Sharing Center Manage wireless networks Description Many people regularly connect to more than one wireless networkone at home, one at work, and possibly more than one public hotspot. When you create a wireless connection, you have the option of saving that network as a connection; any networks that you've saved will show up on the Manage Wireless Networks screen. Configure network services associated with a network connection. To open Control Panel [Network and Internet] Network and Sharing Center View Status Properties Description The Network Connection Properties screen lists all the installed protocols and services associated with a network connection (both wired and wireless). It provides you with basic information about your wireless connection to help with troubleshooting, and it helps you configure your network and its connection. You can selectively choose which protocols and services are supported by any specific connection by using the checkboxes in the list. Display a "live" map of your network. To open Control Panel [Network and Internet] Network and Sharing Center View full map Description The Network Map feature shows a detailed schematic of your network and all the devices connected to it. The map is "live"that is, the icons are not merely representations, but also perform actions and provide information. Hover your mouse over a device and you'll get information about that device; for example, hover your mouse over a gateway to see its IP address and MAC address (a MAC address is a unique identifier for network hardware, a kind of serial number). Click a PC, and you'll connect to it and see all the shared network files and folders in Windows Explorer. Click the Internet icon, and you'll launch your default browser to your home page. Configure, customize, and access network and collaboration tools. To open Control Panel [Network and Internet] Network and Sharing Center Description The Network and Sharing Center lets you configure, access, and troubleshoot a wide variety of network features. You'll most likely find that it's the primary place you'll turn for handling network issues, configuring networks, troubleshooting networks, and performing other network-related tasks. Front and center is a brief diagram of your network, showing your computer name and how it connects to your local network, and then to the Internet. Think of it as a kind of "you-are-here" diagram, because you'll see the words "This computer" underneath your computer. The diagram is so basic that at first it appears it may be useless, but in fact, you'll find it surprisingly useful. The diagram is "live" so that if there's a problem with your network or Internet connection, you'll be notified here. In addition, you can click on the icons representing the different portions of your network and connect to them. For example, click your computer's icon, and you'll open Windows Explorer to your Computer folder. Click the Network icon to open Windows Explorer to the Network folder, which lists all of the computers on your network. Click Internet to open Internet Explorer to your home page. Set up a new network or Internet connection. To open Control Panel [Network and Internet] Network and Sharing Center Set up a connection or network Description One of the reasons that networking in Windows Vista is so much easier than working in previous Windows versions is this wizard. Answer a series of questions, and you can set up a new network or connection in minutes. Get details about a network connection. To open Control Panel [Network and Internet] Network and Sharing Center View Status Control Panel [Network and Internet] Network and Sharing Center Manage network connections Right-click a connection and select Status Description You can use this screen for wired and wireless networks, although it will be used more frequently for wireless networks because wireless connections require more care and handling than wired connections. They are more apt to be slow because of interference problems, and to disconnect due to interference and other problems. And you're likely to have multiple wireless connections set up on your PCone for work, one for home, and several for your favorite hotspots. The Network Connection Status screen provides you with basic information about your connection to help with troubleshooting, and to help you configure your network and its connection. Access another computer remotely and use it as though you are sitting in front of it. To open Start All Programs Accessories Remote Desktop Connection Command Prompt mstsc Description Remote Desktop Connection allows you to connect to another computer (or allows someone else to connect to your computer) and use it as though you were sitting in front of it. Much more than simply a remote command prompt (like SSH or Telnet), Remote Desktop Connection allows you to see a full Desktop, complete with icons and the Start menu, and even run programs on the remote computer. Work with files stored on a network when you're not connected to it. To open Control Panel [Network and Internet] Offline Files Description The Offline Files dialog lets you turn on (and off) and configure Windows Vista's Offline Files feature, which allows you to work with files stored on a network (either server-based or peer-to-peer), when you're not actually connected to the network. Windows XP also had the capability to work with offline files, but it was so confusing to use and configure that people rarely used it. In Windows Vista, the Offline Files dialog and the Sync Center make the use of offline files far easier. If you use a laptop to connect to your network and would like the ability to work with those files when you're not connected, it's an extremely useful feature. Select a power plan for your laptop. To open Control Panel Change battery settings Control Panel [Mobile PC] Power Options Right-click the battery icon Power Options Command Prompt powercfg.cpl Description When you use a laptop, you're always balancing the need to save power against laptop performance. You want to use the computer as long as possible on a battery charge (for example, if you're on a cross-country airplane trip), but you also want to be as productive as possible when using it. The Power Options Control Panel lets you choose a power plan for your laptop, customize power plans, and change a variety of other power options. Synchronize files and folders with devices and network folders. To open Control Panel [Mobile PC] Sync Center Control Panel [Network and Internet] Sync Center Command Prompt mobsync Description If you have multimedia devices such as MP3 players and iPods, have portable storage devices such as USB flash drives, or work on files on multiple PCs, you know how hard it is to keep all your files in sync on those devices and computers. The Sync Center is Windows Vista's answer. It's the central location for syncing all your devices and network folders. When devices and network folders are synced, Windows Vista copies and updates files and folders in both locations. So, for example, if you've made changes to files on both your PC and the device, Windows Vista will perform actions on both of them so that they have identical files and folders. You can also use the Sync Center for synchronizing files across a network, via offline files. With offline files, you can get access to files on a shared network folder, even if your laptop is not currently connected to the network. Offline files allow you to open files, work on them when you're disconnected, and then update them at a later time when the connection has been reestablished. Control commonly used mobility settings. To open Control Panel Mobile PC Windows Mobility Center Description The Windows Mobility Center Panel offers quick access to turn on and off and customize a variety of commonly used mobility settings.