# _00 class notes

<div id="bkmrk-">  
</div>8.26.26 Wednesday<div id="bkmrk-on-your-laptop%3Aether"><span style="font-weight: bold;">On your laptop:  
ethernet adapters: usb-c for laptops</span></div><div id="bkmrk-home-scans-on-wired-"><span style="font-weight: bold;">home scans on wired network: compare</span><div><span style="font-weight: bold;">brew install nmap arp-scan wireshark mtr masscan netcat</span></div><div><span style="font-weight: bold;">brew install --cask wireshark-chmodbpf. (gives you access to interfaces)</span></div><div>  
<div><span style="font-weight: bold;">pi server stations:</span>

> 

<div><span style="font-weight: bold;">join cyber5 network</span></div><div><span style="font-weight: bold;">note IP address (ifconfig)  
</span></div><div><span style="font-weight: bold;">note MAC address (ip link show)</span></div><div><span style="font-weight: bold;">ping gateway  
</span></div><div><span style="font-weight: bold;">traceroute to 4.4.4.4  
</span></div><div><span style="font-weight: bold;">challenge: scan local wLAN with arp -a  
</span></div><div><span style="font-weight: bold;">challenge: scan local network with nmap -sn</span></div><div><div><span style="font-weight: bold;">challenge: ssh into other machines, then change password (share with me)</span></div></div><div>question: what is pentesting?</div><div>  
</div><div><span style="font-weight: bold;">install these:</span></div><div><span style="font-weight: bold;">change name (sudo raspi-config)</span></div><div><span style="font-weight: bold;">activate raspberry pi connect (sudo raspi-config)</span></div><div><span style="font-weight: bold;">pi-apps  
angry ip scanner (ip scan)  
etherape  
nmap  
zenmap  
arp-scan  
wireshark  
install java: sudo apt install libswt-gtk-4-java libswt-gtk-4-jni -y</span></div><div>  
</div><div>homework:</div><div>ifconfig</div><div>route -n get default  
</div><div>ipconfig getifaddr en0  
</div><div>sudo arp-scan --localnet  
</div><div>nmap -sn 192.168.50.0/24 (change to match the network)  
</div><div>scan a target: nmap 192.168.50.20. (change for target)</div><div>deeper scan: nmap -sV 192.168.50.20 (change for target)</div><div>sudo nmap -O 192.168.50.20  
</div><div>sudo nmap -sS -sV -O 192.168.50.20  
</div><div>  
</div><div>next: wireshark</div><div>ping 192.168.50.20  
</div><div>filter: icmp</div><div>curl [http://192.168.50.20](http://192.168.50.20)  
</div><div>filter: tcp.port == 80</div><div>  
</div><div>Friday:</div><div>IP notation</div><div>networks</div><div>DNS</div><div>DHCP</div><div>testing basics: ping, traceroute, nslookup, dig</div><div><span style="font-size: 13px;">navigation: </span></div><div><span style="font-size: 13px;">pwd, ls, cd, mkdir, touch, nano, mv, rm</span><span>  
</span><span style="font-size: 13px;">create hidden file</span><span>  
</span><span style="font-size: 13px;">ssh challenge: find the file</span></div><div><span></span><span style="font-size: 13px;">navigation: wildcards, up, back, ctrl-c  ctrl-z</span></div><div><span></span><span style="font-size: 13px;">=============================</span></div><div>email to bill@hpa.edu

quiz: 8.24.26

1. what was the speed of the ethernet cable you created?
2. as a cybersecurity expert, what are the good and bad parts of ethernet, wireless and fiber?
3. from your homework, list the IP address, subnet mask and router you found
4. list the MAC address for your computer

<div>  
</div><div>worksheet 8.24.26-network recon; find the intruder!</div><div>record your results and email to bill@hpa.edu</div><div>part one: arp scans, MAC addresses</div><div>

1. join the cyberwifi network (password on the board)
2. run an arp -a scan
3. how many hosts do you see?
4. what is common about their MAC address? (look at the first 3 pairs)
5. look online for OUI lookup, (a wireshark utility), copy in one of the MAC addresses you found
6. what could this tell you about the intruder?

<div>part two: nmap</div></div><div>

1. pick one of the clients on the cyberwifi network (remember, these are your friends, be nice)
2. use nmap -sn 192.168.4.0/24 to verify the IP address for your victim
3. use nmap 192.168.4.x to scan the victim
4. what do you see?

<div>part three: IP net monitor</div></div><div>

1. make sure you have IP net monitor installed on your computer
2. run a bonjour scan on your network-do you see IP addresses there?
3. repeat the steps above using the Address Scan tool and port scan

<div>Homework: 8.24.26</div></div><div>

- Use the tools above at home/dorm and record your results so you can share with the class Wednesday
- Look on the app store for other network scanners, try a few of the free ones on your network

<div>next:</div></div><div>

- setup your pi server
- linux for hackers
- hcrw text

</div></div></div></div></div>---

<small>Migrated from Apple Server Wiki. Original page ID: w378H2o5Y</small>