Scanning exercises

As you work with scanning, please keep in mind that the scanning phase is where you begin scans to find openings in the target environment based on the results of your reconnaissance phase. During this phase, you can discover the possible ways or vulnerabilities that will allow you access to the environment.

The following list of activities aims to give you a feel for using the tools. Please remember to stay ethical and don’t conduct scanning activities on any organization that would be deemed illegal.

Port scanning:

• Try to use zenmap to do a network mapping for an environment
• Try to perform a TCP connect scan against a specific IP to find open ports
• Try to perform version detection using nmap -sV on a specific IP to find information about products and their versions
• Try to perform aggressive scan detection by using -T4 on a specific IP to increase the scan speed

Vulnerability scanning:

• Try to use OpenVAS to scan an...