This has been footprinting and scanning.
I've been your instructor Joshua Mason.
And in this whole section, we've covered
what you need to know to understand
why port scanning and network host discovery exists.
And hopefully you're able to do it a little bit on your own.
Again, we want to think like the adversary--
what our value is doing and what do
we need to do in order to either emulate them in a useful way
during a penetration test or if we're thinking about it
from a defensive standpoint, what
do we need to block against.
We've seen some good examples of some evasion by changing ports.
We've seen some good examples of evasion
by blocking ARP and ping.
Those are the sorts of things you want to implement.
And if we're on an attacking side, if you know machine is up
and they don't respond to those and you
can't find the ports in the standard place,
make sure to be very thorough in your enumeration.
We're going to get into that in later sections.
Once we understand what the services are,
we can then start looking up and seeing if there are
vulnerabilities that are known.
So I'm going to leave you with that.
One last thing, this disclaimer.
We're touching machines and if it's not yours,
don't touch it unless you've been given permission.
That's the last I'm going to say about that.
Thank you and I'll see you in the next.