Lab2_Recon_Network_Scanning

.docx

School

University of Rochester *

*We aren’t endorsed by this school

Course

3710

Subject

Computer Science

Date

Feb 20, 2024

Type

docx

Pages

6

Uploaded by SargentFlagKomodoDragon15

Report
CS 3710 Introduction to Cybersecurity Term: Spring 2024 Lab Exercise 2 – Reconnaissance and Network Scanning Lab Due Date: February 2, 2024 11:59pm Points Possible: 7 points Name: Ziqian Zhao By submitting this assignment you are digitally signing the honor code, “On my honor, I pledge that I have neither given nor received help on this assignment.” Generative AI assistance is NOT permitted on this assignment. 1. Overview This lab exercise will provide some hands-on experience with reconnaissance, network scanning, and service enumeration. 2. Resources required This exercise requires a Kali Linux VM running in the Virginia Cyber Range. 3. Initial Setup From your Virginia Cyber Range course, select the Cyber Basics environment. Click “start” to start your environment and “join” to get to your Linux desktop login. 4. Tasks Task 1: Whois lookups For this portion of the exercise, you can use a web browser on your laptop or desktop computer, or you can log in to your Cyber Basics environment in the Virginia Cyber Range. WHOIS is a tool for querying databases containing domain registration data to determine ownership, IP addresses, and other information. A reverse whois lookup can be used to find domains that are registered by a particular individual or organization. ICANN is the authoritative source for WHOIS information, however due to the General Data Protection Regulation (GDPR) a lot of its information is now restricted. Other sources of WHOIS information include https://pk.godaddy.com/whois , and https://whois.domaintools.com/ . Question #1: Do a whois lookup on the domain jmu.edu . To whom is the domain registered? What is the administrative contact name, address, email, and phone number? (.5 point) The domain jmu.edu is registered to James Madison University. The administrative contact name is Dennis Little, with address as Massanutten Hall 265, MSC 5733, Harrisonburg, VA 22807, USA. Phone number is +1.5405681676. Email is littledr@jmu.edu © 2024 Virginia Cyber Range. Created by David Raymond, Ph.D., CISSP, Virginia Tech. (CC BY-NC-SA 4.0) Modified by Angela Orebaugh, Ph.D, CISSP, University of Virginia
CS 3710 Introduction to Cybersecurity Term: Spring 2024 Task 2: nslookup and dig Nslookup is a Linux and Windows tool for querying the distributed database that makes up the domain name system (DNS). This database translates host names (such as www.virginiacyberrange.org) to IP addresses (52.85.151.5). This translation is necessary because your computer must have the IP address of systems, such as web servers, that it communicates with, but humans are not good at remembering strings of numbers so we remember hostnames instead. DNS converts hostnames to the proper IP address so your web browser can find that web page. This DNS lookup usually happens in the background so users don’t realize it is happening. You can use the nslookup tool to do this mapping from the command line. For this exercise, you will log in to your Virginia Cyber Range account and select the Cyber Basics environment, then click “start” to start your environment and “join” to get to your Linux desktop login. Question #2: Use nslookup to find the IP address for vt.edu. What is the IPv4 address? Provide a screen shot and explain where you found the answer. (.5 point) The IPv4 address is 198.82.215.14. Dig is another, and generally more powerful, tool for DNS database queries. However, dig is only available on Linux and Unix systems. Question #3: Examine the Linux ‘man page’ for the dig utility to find more information about dig. What does the ‘ -x ’ command-line option do in dig? (.5 point) The -x command-line option in dig is used for doing reverse DNS lookups. Instead of directly providing the hostname to get the IP address, we now provide the IP address to get the hostname associated with it. Question #4: Use dig to conduct a reverse lookup of the IP address 134.126.20.33. What is the hostname or hostnames correspond with that IP address? (.5 point) The corresponding hostname is cs.jmu.edu. © 2024 Virginia Cyber Range. Created by David Raymond, Ph.D., CISSP, Virginia Tech. (CC BY-NC-SA 4.0) Modified by Angela Orebaugh, Ph.D, CISSP, University of Virginia
CS 3710 Introduction to Cybersecurity Term: Spring 2024 Task 3: Network scanning using nmap Your Kali Linux virtual machine in the Virginia Cyber Range is connected to a small network subnet with other systems. Your first step in this exercise is to understand your network neighborhood. Question #5: What is your IPv4 address and netmask? (.5 point) The address is 10.1.86.39 and the netmask is 255.255.240.0 There are different ways to accomplish host discovery on a network. For this exercise we will use Nmap (https://nmap.org/book/man.html ), a widely used tool for network exploration and port scanning. Nmap can be used to scan a single hostname or IP address or range of addresses. You can learn more about Nmap through the man page ( man nmap ) or simply type nmap with nothing else and hit enter to see a summary of command options and usage. To scan a single host you would use the following command: $ nmap <options> <hostname or IP address> Question #6: Run an nmap scan against your own IP address. What ports are open? Provide a screenshot and explain or show where you found your answer. (.5 point) 22/tcp(SSH) and 3389/tcp(). I found it in the line starting with “PORT”. Ping scan . Let’s see what other systems are on the network by using Nmap’s ping scan. Nmap has a ping scan option that simply sends a ping packet to each IP address and listens for replies to identify active © 2024 Virginia Cyber Range. Created by David Raymond, Ph.D., CISSP, Virginia Tech. (CC BY-NC-SA 4.0) Modified by Angela Orebaugh, Ph.D, CISSP, University of Virginia
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help