Scanning
How hosts, services and weaknesses get found, with the commands behind each technique.
- Lessons
- 12
- With simulators
- 8
Finding hosts5
- Ping scanningIntroSweep a range of addresses to see which hosts are alive.Simulator
- Subnet scanningCoreMap every device across a network range.
- ARP scanningCoreDiscover devices on the local network from their hardware addresses.Simulator
- TracerouteIntroFollow a packet hop by hop to see the path it takes.Simulator
- IP geolocationIntroEstimate where an address is, and where that estimate goes wrong.
Probing services5
- Port scanningIntroFind which doors a host has open, and what answers behind them.Simulator
- DNS scanningCoreEnumerate the names and records a domain exposes.Simulator
- Banner grabbingCoreRead what a service says about itself when you connect.Simulator
- Wireless scanningCoreList nearby access points and what they reveal.Simulator
- SSH key scanningAdvancedCollect host keys to find weak or reused ones.Simulator