Nmap Fundamentals: Network Scanning For Ethical Hacking

Learn how to download and install Oracle VirtualBox on Windows, install the extension pack, and configure virtual networks with a DHCP server for isolated pentest environments.

Download and extract the Kali Linux VirtualBox image, import it into VirtualBox, configure memory and CPUs, set up bridged internet and internal pen test networks, then snapshot and boot.

Log in to Kali Linux, adjust the display, and change the default password; test connectivity with ping and update apt repositories before shutting down.

Put Kali Linux in full screen by installing the VirtualBox guest additions. Then enable auto resize and adjust the display resolution to match your screen.

Set up metasploitable 2 in a pentest lab by downloading the image, importing it into VirtualBox, configuring an internal network, and logging in as MSF admin.

Set up metasploitable 3 windows and linux in a lab using vagrant with virtualbox, install vagrant and plugins, download boxes, configure internal pentest and hidden networks, and create snapshots.

Demonstrates network scanning with nmap on a Kali Linux and Metasploitable, performing ping scans, service version enumeration, operating system detection, smb discovery, aggressive scanning, and OpenSSH exploit.

Install and configure Nessus Essentials, run vulnerability scans across ip addresses, interpret scan results, review vulnerabilities and remediation options, and generate comprehensive pdf reports for risk assessment.

Learn how the three-way handshake enables TCP connections, delivering reliable data through acknowledgements, in-order delivery, retransmission, and congestion control, while comparing TCP to UDP and noting header overhead.

Explore how UDP operates as a connectionless, fast, message-oriented protocol, prioritizing speed over guaranteed delivery, with applications like DNS, DHCP, and VoIP.

Run a full tcp connect scan to observe the complete three-way handshake and identify open and closed ports, noting its loudness and potential logging by intrusion detection systems.

Master stealth (half-open) scans in nmap by interrupting the tcp three-way handshake: send syn, receive synack, then reset instead of ack, revealing open ports and showing closed ports via reset.

Learn the null scan in Nmap, sending a TCP packet with no flags to identify open ports by no response and closed ports by reset ack.

Execute a udp scan with nmap to identify the top ports, and learn that icmp destination unreachable messages reveal closed ports while no response may indicate open or filtered ports.

Perform the fin scan with nmap, a stealth tcp technique that bypasses the three-way handshake by sending a fin packet; no response means open or filtered, reset-ack means closed.

Explore the christmas tree scan, sending a crafted tcp packet with fin, urg, and push flags to reveal open ports by silence and closed ports by reset, using nmap -sX.

Scan an entire network subnet with nmap to identify active hosts and open ports, using cidr notation and options like -v, -F, and --exclude.

Create a target list with nano and scan using nmap -iL list.txt -p 22,2580,443 -v. Then perform random host scans with -iR and -sn for ping checks, with proper authorization.