DevOps : සිකියුරිටි 1 - Network Scanning - nmap & අපි 1

• host ගෙ IP address එක
• host ගෙ operating system එක
• host ගෙ active ports /open  ports මොනවද
• host ගෙ රන් වන services මොනවද 
• host ගෙ තිබෙන applications මොනවද

1.  Network Mapping - මෙහිදී අපි messages කිහිපයක් host ට යවනව host ව active නම් එය response එකක් generate කරනව. අපිට ඒ අනුව තොරතුරු ලබාගන්න පුළුවන්. 
2.  Port Scanning - විශේෂිත port එකකට හෝ ports පරාසයකට messages යොමුකර ලැබෙන ප්‍රතිචාරය අනුව අදාල port එක active ද කියල බලන එක තමයි මෙහිදී කරන්නෙ.
3.  Service සහ  ඒවායේ Version Detection - මෙහිදී අපි කරන්නෙ විශේෂයෙන්ම හදන ලද message (ගොනාට අන්දන type එකේ message) එකක් active ports වලට යවල එම ports වල රන් වන services මගින් generate කරන response එකෙන් service එකට අදාල application /  software එකේ version එක පිළිබද තොරතුරු ලබාගැනීම මෙහිදී සිදු කරයි.
4.  OS Detection - මෙහිදීත් අපි කරන්නේ "Service සහ ඒවායේ Version Detection" වලදී කරනව වගේ දෙයක් කරල රන් වෙන OS එක ගැන විස්තර ටික සොයාගන්නව .

nix@Dell ~ $ sudo apt-get install nmap -y
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  libblas-common libblas3 liblinear3 liblua5.2-0 libxslt1.1 lua-lpeg ndiff python-bs4 python-html5lib python-lxml
Suggested packages:
  liblinear-tools liblinear-dev python-genshi python-lxml-dbg python-lxml-doc
The following NEW packages will be installed:
  libblas-common libblas3 liblinear3 liblua5.2-0 libxslt1.1 lua-lpeg ndiff nmap python-bs4 python-html5lib python-lxml
0 upgraded, 11 newly installed, 0 to remove and 36 not upgraded.
Need to get 6096 kB of archives.
After this operation, 27.1 MB of additional disk space will be used.
Get:1 http://us-central1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libblas-common amd64 3.6.0-2ubuntu2 [5342 B]
Get:2 http://us-central1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 libblas3 amd64 3.6.0-2ubuntu2 [147 kB]
Get:3 http://us-central1.gce.archive.ubuntu.com/ubuntu xenial/main amd64 liblinear3 amd64 2.1.0+dfsg-1 [39.3 kB]
---
---
---
Setting up python-bs4 (4.4.1-1) ...
Setting up python-html5lib (0.999-4) ...
Setting up python-lxml (3.5.0-1build1) ...
Setting up ndiff (7.01-2ubuntu2) ...
Setting up nmap (7.01-2ubuntu2) ...
Processing triggers for libc-bin (2.23-0ubuntu9) ...
nix@Dell ~ $

Click to expand...

nix@Dell ~ $ nmap -sV 127.0.0.1
Starting Nmap 7.01 ( https://nmap.org ) at 2017-07-10 17:14 +0530
Nmap scan report for localhost (127.0.0.1)
Host is up (0.000056s latency).
Not shown: 996 closed ports
PORT     STATE SERVICE          VERSION
22/tcp   open  ssh              OpenSSH 7.2p2 Ubuntu 4ubuntu2.2 (Ubuntu Linux; protocol 2.0)
80/tcp   open  http             nginx 1.10.3 (Ubuntu)
3306/tcp open  mysql            MySQL 5.5.5-10.1.25-MariaDB-1~xenial
7000/tcp open  afs3-fileserver?
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 6.86 seconds
nix@Dell ~ $

Click to expand...

nix@Dell ~ $ nmap -sV 192.168.43.1-100
Starting Nmap 7.01 ( https://nmap.org ) at 2017-07-10 17:17 +0530
Nmap scan report for 192.168.43.1
Host is up (0.010s latency).
Not shown: 999 closed ports
PORT   STATE SERVICE VERSION
53/tcp open  domain  dnsmasq 2.51
Nmap scan report for dev.xxxxxx.ml (192.168.43.74)
Host is up (0.000051s latency).
Not shown: 997 closed ports
PORT     STATE SERVICE VERSION
22/tcp   open  ssh     OpenSSH 7.2p2 Ubuntu 4ubuntu2.2 (Ubuntu Linux; protocol 2.0)
80/tcp   open  http    nginx 1.10.3 (Ubuntu)
3306/tcp open  mysql   MySQL 5.5.5-10.1.25-MariaDB-1~xenial
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 100 IP addresses (2 hosts up) scanned in 18.73 seconds
nix@Dell ~ $

Click to expand...

nix@Dell ~ $ nmap -sP 192.168.43.1-255
Starting Nmap 7.01 ( https://nmap.org ) at 2017-07-10 17:34 +0530
Nmap scan report for 192.168.43.1
Host is up (0.0072s latency).
Nmap scan report for dev.xxxxxx.ml (192.168.43.74)
Host is up (0.00011s latency).
Nmap done: 255 IP addresses (2 hosts up) scanned in 36.25 seconds
nix@Dell ~ $

Click to expand...

nix@Dell ~ $ nmap -nsP 192.168.43.1/24
Starting Nmap 7.01 ( https://nmap.org ) at 2017-07-10 17:42 +0530
Nmap scan report for 192.168.43.1
Host is up (0.0040s latency).
Nmap scan report for 192.168.43.74
Host is up (0.000065s latency).
Nmap done: 256 IP addresses (2 hosts up) scanned in 3.11 seconds
nix@Dell ~ $

Click to expand...

nix@Dell ~ $ nmap -n -sP -oN running_hosts 192.168.43.1/24
Starting Nmap 7.01 ( https://nmap.org ) at 2017-07-10 18:00 +0530
Nmap scan report for 192.168.43.1
Host is up (0.0025s latency).
Nmap scan report for 192.168.43.74
Host is up (0.000081s latency).
Nmap done: 256 IP addresses (2 hosts up) scanned in 2.50 seconds
nix@Dell ~ $

Click to expand...

nix@Dell ~ $ cat running_hosts
# Nmap 7.01 scan initiated Mon Jul 10 18:00:42 2017 as: nmap -n -sP -oN running_hosts 192.168.43.1/24
Nmap scan report for 192.168.43.1
Host is up (0.0025s latency).
Nmap scan report for 192.168.43.74
Host is up (0.000081s latency).
# Nmap done at Mon Jul 10 18:00:44 2017 -- 256 IP addresses (2 hosts up) scanned in 2.50 seconds
nix@Dell ~ $

Click to expand...

nix@Dell ~ $ nmap -n -sP -oG running_hosts_new 192.168.43.1/24
Starting Nmap 7.01 ( https://nmap.org ) at 2017-07-10 18:06 +0530
Nmap scan report for 192.168.43.1
Host is up (0.0040s latency).
Nmap scan report for 192.168.43.74
Host is up (0.000062s latency).
Nmap done: 256 IP addresses (2 hosts up) scanned in 2.41 seconds
nix@Dell ~ $

Click to expand...

nix@Dell ~ $ cat running_hosts_new
# Nmap 7.01 scan initiated Mon Jul 10 18:06:32 2017 as: nmap -n -sP -oG running_hosts_new 192.168.43.1/24
Host: 192.168.43.1 ()   Status: Up
Host: 192.168.43.74 ()  Status: Up
# Nmap done at Mon Jul 10 18:06:35 2017 -- 256 IP addresses (2 hosts up) scanned in 2.41 seconds
nix@Dell ~ $

Click to expand...