Footprinting and Scanning | eJPT

Mapping Network

Understanding the landscape through network mapping is a crucial phase in the eLearnSecurity Junior Penetration Tester (eJPT) certification.

Dive into network traffic analysis with:

bash

sudo wireshark # Launch Wireshark for detailed network traffic analysis

Identify hosts on the network using:

bash

sudo arp-scan -I eth0 -g 10.0.2.15/24 # Perform ARP scan to discover hosts

Confirm the availability of a host:

bash

ping 10.0.2.15 # Ping a host to check for its availability

Ping all hosts within the netmask:

bash

fping -I -g 10.0.2.0/24 # Ping all hosts within the specified netmask

Efficient port scanning is a fundamental skill for penetration testers.

Scan hosts for open ports:

bash

sudo nmap -sn 10.0.2.0/24 # Perform a quick scan to identify live hosts

Scan open ports for hosts listed in a file:

bash

sudo nmap -iL IPs.txt # Perform port scanning for hosts listed in the file IPs.txt

Enhance your scan with service and OS detection:

bash

sudo nmap -iL IPs.txt -sV -O # Conduct an in-depth scan with service and OS detection

Connect to FTP if it's open:

bash

tftp 10.10.10.10 -p 143 # Connect to FTP server using TFTP protocol

Run an aggressive scan with basic scripts:

bash

nmap 10.10.10.10 -T4 -sU -p 161 -A # Perform an aggressive UDP scan with detailed information

Explore these commands to master the art of footprinting and scanning, an integral part of the eJPT certification.