Ceh v8: Scanning Networks

Lab 18

Scanning Devices in a Network Using The Dude

The Dnde automatically scans all devices within specified subnets, draws and lays out a wap of your networks, monitors services of your devices, and a/eftsyon in case some service has p roblems.

Lab Scenario

111 the previous lab you learned how packets can be captured using Colasoft Packet Builder. Attackers too can sniff can capture and analyze packets from a network and obtain specific network information. The attacker can disrupt communication between hosts and clients by modifying system configurations, or through the physical destruction of the network. As an expert ethical hacker, you should be able to gadier information on organizations network to ch e ck for vulnerabilities and fix them before an attacker g e ts to compromise the machines using th o se vulnerabilities. If you detect any attack that has been performed on a network, immediately implement preventative measures to stop any additional unauthorized access. in this lab you will learn to use The Dude tool to scan the devices in a network and the tool will alert you if any attack has been performed on the network.

Lab Objectives

The objective of diis lab is to demonstrate how to scan all devices widiin specified subnets, draw and layout a map of your networks, and monitor services in the network.

Lab Environment

To carry out the lab, you need:

■ The Dude is located at D:\CEH-T00ls\CEHv8 Module 03 Scanning Networks\Network Discovery and Mapping Tools\The Dude
■ You can also download the latest version of The Dude from the http: / / www.1nikiodk.com / thedude.php

■ If you decide to download the latest version, then sc r e en sh o ts shown
in the lab might differ
■ A computer running Windows Server 2012
■ Double-click die The Dude and follow wizard-driven installation steps to install The Dude
■ Administrative privileges to run tools

Lab Duration

Time: 10 Minutes

Overview o f The Dude

The Dude network monitor is a new application that can dramatically improve die way you manage your network environment It will automatically scan all devices within specified subnets, draw and layout a map of your networks, monitor services of your devices, and alert you in case some service lias problems.

Lab Tasks

1. Launch the Start menu by hovering the mouse cursor on the lower-left corner of the desktop.

FIGURE 18.1: Windows Server 2012 - Desktop view

2. in the Start menu, to launch The Dude, click The Dude icon.

FIGURE 182: Windows Server 2012 - Start menu

3. The main window of The Dude will appear

FIGURE 18.3: Main window of The Dude

4. Click the Discover button on the toolbar of die main window.

FIGURE 18.4: Select discover button

5. The Device Discovery window appears

FIGURE 18.6: Device discovery ^־uxicra־

6. in the Device Discovery window, specify Scan Networks range, select default from die Agent drop-down list, select DNS, SNMP, NETBIOS, and IP from die Device Name Preference drop-down list, and click Discover.

FIGURE 18.7: Selecting device name preference

7. Once the scan is complete, all the devices connected to a particular network will be displayed.

FIGURE 18.8: Overview of network connection

8. Select a device and place die mouse cursor on it to display the detailed information about diat device.

FIGURE 18.9: Detailed information of the device

9. Now, click the down arrow for die Local drop-down list to see information on History Actions, Tools, Files. Logs, and so on.

FIGURE 18.10: Selecting Local information

10. Select options from die drop-down list to view complete information.

FIGURE 18.11: Scanned network complete information

11. As described previously, you may select all the other options from the drop-down list to view die respective information.

12. Once scanning is complete, click the button to disconnect.