2017-2018-2 20155231 "Network countermeasure Technology" experiment Eight: Web Foundation experiment

Practical goals

Master the basic skills of information collection and the use of common tools.

Experimental content (1) application of various search techniques

• such as ip2location location query

Queried for their

• IP route Detection Tool: Traceroute
  traceroute www.baidu.com
  But it seems that the command is not right, read the other blog, the Internet search, is this

(2) query for DNS IP registration information

Information about the target Web site is mined through DNS and IP:

• You can use the WHOIS command to query at the MSF terminal.
  msf > whois baidu.com
  I entered directly in the terminal whois baidu.com can also query

(Remove the WWW prefix for whois queries)

Can see Baidu's IP, registrant's name, location and other information

• Nslookup Domain name Query

• Querying IP addresses over the network

• Use the dig command to query Baidu's information, more accurate than nslookup, with IP addresses and DNS records

• Information Enquiry service provided by Netcraft

(3) Basic scanning technology: Host discovery, port scan, OS and service version detection, specific service enumeration

• nmap -sn 192.168.1.0/24Scan the local area network and discover the active host (.. The WALN was a bit too much for the dorm.

Find your own Windows host IP

• Port scan nmap -sS 192.168.1.106 , using SYN scan

• OS and service version detection nmap -O and nmap -sv detailed information that can be queried to the target machine

(4) Vulnerability scanning

• Vulnerability Scan-openvas

Update OpenVAS
apt-get update；
apt-get dist-upgrade

......

(The step is very tedious and long, then discovered actually can use directly, Kuai Linux actually has the own)

After installation, run openvas-check-setup Follow the instructions to do the next step

Runopenvas-check-setup
(Changed the network, the IP address changed = =)

Answer questions after the test

1. Which organizations are responsible for the management of DNS,IP.
   The top management is the Icann,icann Council, the core authority of ICANN, which established three supporting organizations:
   Address support Organization (ASO) is responsible for the management of IP address systems.
   Domain name support Organization (DNSO) is responsible for the management of the domain Name System (DNS) on the Internet.
   The Protocol Support organization (PSO) is responsible for assigning unique parameters that involve Internet protocols.

2. What is 3R information.
   Registrant: Registered Person
   Registrar: Registrars
   Registry: Official Registration Office

3. Evaluate the accuracy of the scan results.
   Very accurate

Practice Summary and experience

(This experiment in exchange for other people's virtual machine, their own collapse of the re-copy.) Every time I experiment with my own computer is a headache = =) learned some ways to collect information

What skills or steps are missing from combat?

Using NMAP to scan host vulnerabilities also requires shutting down the host's firewall and butler.

2017-2018-2 20155231 "Network countermeasure Technology" experiment Eight: Web Foundation experiment