2. Discovering Devices Connected to the Same Network Subtitles

At 00:00:00,950, Character said: Information gathering is one of the most important steps
2

2

At 00:00:04,860, Character said: when it comes to hacking or penetration testing.
3

3

At 00:00:07,970, Character said: If you think of it, you can't really gain access to a system
4

4

At 00:00:11,530, Character said: if you don't have enough information about it.
5

5

At 00:00:14,810, Character said: So, for example, let's say you're connected to a network
6

6

At 00:00:17,990, Character said: and one of the devices connected to this network
7

7

At 00:00:21,070, Character said: is your target.
8

8

At 00:00:22,690, Character said: Now for you to hack into that target,
9

9

At 00:00:25,260, Character said: first you need to discover all of the connected clients
10

10

At 00:00:28,310, Character said: to this network, get their MAC address, their IP address,
11

11

At 00:00:31,910, Character said: and then from there try to maybe gather more information
12

12

At 00:00:35,620, Character said: or run some attacks in order to gain access to your target.
13

13

At 00:00:40,680, Character said: Now, there are a number of programs
14

14

At 00:00:42,650, Character said: that will do this for you.
15

15

At 00:00:44,330, Character said: Examples are NetDiscover and Nmap,
16

16

At 00:00:47,050, Character said: which do this job really, really well.
17

17

At 00:00:49,260, Character said: So in this lecture, we'll start with the simpler one,
18

18

At 00:00:52,220, Character said: which is NetDiscover and see how to use it to quickly map
19

19

At 00:00:56,780, Character said: the network we're connected to.
20

20

At 00:00:59,110, Character said: And in the next lecture,
21

21

At 00:01:00,620, Character said: I'm gonna show you how to use Nmap
22

22

At 00:01:02,780, Character said: to gather detailed information about all
23

23

At 00:01:05,920, Character said: of the clients connected to the same network.
24

24

At 00:01:10,420, Character said: So, I have my Kali terminal in here, and if I do ifconfig,
25

25

At 00:01:15,530, Character said: you'll see I have eth0, it has an IP address.
26

26

At 00:01:20,050, Character said: And like I said, this is the virtual interface created
27

27

At 00:01:23,850, Character said: by VirtualBox when we set the Kali machine
28

28

At 00:01:27,170, Character said: to use a NAT network.
29

29

At 00:01:29,870, Character said: Now, I also said that this NAT network behaves exactly like
30

30

At 00:01:34,150, Character said: an Ethernet network.
31

31

At 00:01:35,730, Character said: And as far as the Kali machine is concerned,
32

32

At 00:01:38,650, Character said: it thinks that it is connected to a real wired network.
33

33

At 00:01:42,680, Character said: And as you can see in here,
34

34

At 00:01:44,010, Character said: it's telling me that wired connected.
35

35

At 00:01:47,480, Character said: Now, I have my virtual Windows machine right here.
36

36

At 00:01:51,420, Character said: It is configured to use the same NAT network
37

37

At 00:01:54,910, Character said: as the Kali machine.
38

38

At 00:01:56,970, Character said: Remember, we're still in the network hacking section,
39

39

At 00:02:00,120, Character said: so both you and the target machine need to be connected
40

40

At 00:02:04,650, Character said: to the same network.
41

41

At 00:02:06,400, Character said: So as far as these two computers are concerned,
42

42

At 00:02:09,430, Character said: they think that they are connected to the same network.
43

43

At 00:02:13,130, Character said: So what I wanna do right now is use NetDiscover
44

44

At 00:02:16,090, Character said: and see how we can use it to discover all devices connected
45

45

At 00:02:19,960, Character said: to the same network.
46

46

At 00:02:22,330, Character said: Now the method that I'm gonna show you
47

47

At 00:02:24,040, Character said: will work exactly the same,
48

48

At 00:02:25,860, Character said: whether you're using it against a virtual network,
49

49

At 00:02:28,180, Character said: like I'm doing right now, or against real network,
50

50

At 00:02:31,100, Character said: and even if your target is a Wi-Fi or a wireless network.
51

51

At 00:02:35,690, Character said: So all you have to do is type the name of the program,
52

52

At 00:02:38,130, Character said: which is NetDiscover, and then type dash r
53

53

At 00:02:41,350, Character said: to specify an IP range to search for.
54

54

At 00:02:46,170, Character said: This needs to be arranged that can be accessed by you.
55

55

At 00:02:49,680, Character said: So right now you can see that my IP is 10.0.2.16
56

56

At 00:02:54,020, Character said: and I can only access IPs on the same subnet.
57

57

At 00:02:57,980, Character said: So IPs on the same subnet start at 10.0.2.0,
58

58

At 00:03:02,860, Character said: and they would end at 10.0.2.254
59

59

At 00:03:06,730, Character said: because 254 is the last IP that a client can have.
60

60

At 00:03:12,380, Character said: So, my range is gonna be 10.0.2.1
61

61

At 00:03:17,400, Character said: and I wanna search for clients that might have an IP
62

62

At 00:03:20,800, Character said: of 10.0.2.1, 10.0.2.2, 10.0.2.3,
63

63

At 00:03:25,010, Character said: all the way up to 10.0.2.254.
64

64

At 00:03:29,700, Character said: So instead of manually typing all of these IPs,
65

65

At 00:03:32,780, Character said: I can just type over 24
66

66

At 00:03:35,920, Character said: and NetDiscover will automatically know
67

67

At 00:03:38,500, Character said: that I'm trying to search for all of the IPs
68

68

At 00:03:41,570, Character said: that start at 10.0.2.1 and end at 10.0.2.254.
69

69

At 00:03:47,400, Character said: So this is a way of specifying an IP range
70

70

At 00:03:51,290, Character said: for the whole subnet.
71

71

At 00:03:53,360, Character said: So if I hit enter now, you'll see that NetDiscover
72

72

At 00:03:57,540, Character said: will show me all the IPs of the devices connected
73

73

At 00:04:01,440, Character said: to the same network.
74

74

At 00:04:03,070, Character said: And note that the first three parts of the IPs
75

75

At 00:04:05,610, Character said: are always the same because they are on the same subnet.
76

76

At 00:04:09,710, Character said: And I also have the Mac addresses of these clients
77

77

At 00:04:12,950, Character said: and Net discovers also attempting
78

78

At 00:04:15,340, Character said: to guess the device vendor.
79

79

At 00:04:18,620, Character said: Now, if I press queue, this will quit the program.
80

80

At 00:04:21,870, Character said: And right now, we have a list of all the connected clients
81

81

At 00:04:25,640, Character said: to the same network.
82

82

At 00:04:28,020, Character said: Now, like I said, you can also use this method
83

83

At 00:04:30,770, Character said: to discover clients connected to the same Wi-Fi network.
84

84

At 00:04:35,240, Character said: The only thing is, right now, if I do ifconfig,
85

85

At 00:04:39,640, Character said: you can see that my Kali machine
86

86

At 00:04:41,770, Character said: does not have a wireless adapter,
87

87

At 00:04:44,120, Character said: it's not connected to a Wi-Fi network.
88

88

At 00:04:47,970, Character said: And like I said before,
89

89

At 00:04:49,520, Character said: you cannot access the built in wireless card
90

90

At 00:04:52,600, Character said: from a virtual machine.
91

91

At 00:04:55,140, Character said: Therefore, if you want to do this
92

92

At 00:04:57,410, Character said: or run any of the wireless attacks that we're gonna see
93

93

At 00:05:00,420, Character said: in the future against a real computer
94

94

At 00:05:03,510, Character said: and a real wireless network,
95

95

At 00:05:05,470, Character said: you're gonna need to use a wireless adapter.
96

96

At 00:05:09,720, Character said: Now, I'm gonna include links in the description
97

97

At 00:05:12,210, Character said: that will help you pick a good adapter
98

98

At 00:05:14,240, Character said: that works with Kali Linux.
99

99

At 00:05:16,480, Character said: But right now I actually have one,
100

100

At 00:05:18,650, Character said: and I'm just gonna connect it
101

101

At 00:05:19,890, Character said: and use it just to prove to you,
102

102

At 00:05:21,940, Character said: if things work on the virtual machines connected
103

103

At 00:05:24,980, Character said: to the virtual network,
104

104

At 00:05:26,930, Character said: they will work exactly the same against a real network
105

105

At 00:05:30,630, Character said: with real machines.
106

106

At 00:05:32,630, Character said: So, I'm gonna connect my adapter now.
107

107

At 00:05:35,980, Character said: And if I do ifconfig, it's still not showing up,
108

108

At 00:05:40,900, Character said: so I'm gonna connect it from my devices, USB,
109

109

At 00:05:46,010, Character said: and click on the adapter name,
110

110

At 00:05:49,240, Character said: and let's see if it shows up now.
111

111

At 00:05:52,150, Character said: Perfect, as you can see, I have an adapter now called Lan0.
112

112

At 00:05:57,380, Character said: And what I'm gonna do is,
113

113

At 00:05:58,860, Character said: I need to connect this adapter to a Wi-Fi network first
114

114...