CPE434-Lab 11 Introduction to nMap and Hydra Solved

nMap is a utility that allows to check all the devices that are connected to the network. You can basically check the open ports in those devices also. You can also find multitude of other information regarding those devices connected to the network.

Subtask I:                                                                        

1.       You must log into Blackhawk using ssh <username@blackhawk.ece.uah.edu . Provide your password. If you are in lab machines, you are already logged into Blackhawk . Once you are inside Blackhawk, you need to ssh into echo. In your terminal, type ssh echo and provide your Blackhawk password. The file system is shared, so you should be able to see the same file as you would see in Blackhawk.

2.         From Echo, you will log into another computer. You are given a machine number and password. Please keep this with you in a place that you can remember. You can change your password if you want. This machine that you are logged in right now will be referred to as HOST in this text from now on. SSH into host using following command. ssh -l odroid odroidx . Replace the x with your number. Provide a password when prompted. Your odroidx can be anything from odroid2 to odroid60 .

3.      Do ls in your terminal. Take a screenshot of what you see. Put this in your report.

Subtask II:                                                                       

4.       Type in ifconfig . Take a screenshot of what you see. What is a virtual bridge?

5.      The odroid that you just logged in already has a virtual machine running. Write a short note on KVM and QEMU highlighting what each does.

6.       Type ps -aux | grep qemu in terminal. Take a screenshot of what you see and paste the output.

7.         The virtual machine that is running in your machine will be referred to as Guest in this text. Log into the guest machine. The user name is root and the password is odroid . But we do not know the IP. Let us use nmap to detect all live hosts in our network. verify nmap is installed by typing nmap in your terminal. We will look into the virtual bridge interface.

  Use nmap to scan the IP address that starts with 192.168.xxx.xxx . This might be the Guest machine. You many need to know an idea of subnet masking . Please search online on how to scan a network using nmap . Does knowing a part of guest IP help?

8.      What is the virtual machine that you discovered. What are the ports that are open in the machine ? Log into that virtual machine that you discovered. Paste screenshot of successful login.

Subtask III:                                                                      

9.      From your Guest machine, where you are currently, log back into Host machine using ssh.

 Use the host IP on virtual bridge interface. Use ssh odroid@<host ip . The host ip that you provide is the ip on virtual interface, and not the IP you used to login from echo . What IP should you use now?

10.   At this instance, you should be logged into HOST from GUEST which you logged in from HOST. Create a file named "inception_host.txt". Open the file and write "Yes, somewhat like the movie. I am <charger id".

11.   Where do you think you created this file?

12.    Cat the content of the file using cat <filename and take a screenshot.

13.    Hit exit on the terminal. Where are you now after exit? Perform ifconfig as a proof.

14.    Exit from here. Where are you now after exit?

15.   Can you see 'inception_host.txt'. Cat the content of the file and take a screenshot.

Subtask IV:                                                                      

 

16.   

 
 
 

Log into the guest machine again. You are root, which means you can do what ever you want. Create a user account with name as your chargerid. Please search online on how to create a user account in linux machine. At this moment you should have two user accounts in guest machine. Give a password that you will remember. Screenshot

17.   Log into the second guest from the first guest. You can ssh into the second guest using the same IP as the first guest.

18.   Create a file name "inception_secondguest.txt" and write what ever you want. Cat the content of the file and take screenshot.

19.   exit from second guest.

20.   exit from first guest.

Subtask V                                                                        

21.    You are already familiar with using nmap for live host discovery. Here you will use the same concept but you will find how many of your friends machine are live at this particular moment. You should look at the interface eth0 . How many live machines did you find? Screenshot. This might take some time (couple minutes). Your screenshot should clearly indicate the number of machines that are up.

22.   Based on scan from above, for any two of your friend's machine write following information

1. what ports are open? If you know the password, can you attack their machine? (Do not attack !!)

2. What OS is your friend using?

23.   Based on your scan from 21, you would not be able to know the OS. All you can do is guess. Find the command to detect OS of live hosts using nmap. Perform a new scan, and answer Q22 again. Take screenshot of scan that shows the OS also.

(The Real Deal)                                                               

24.   Please read about Hydra at https://tools.kali.org/password-attacks/hydra. Write a short note on Hydra and its capabilities of at least five sentences . Add sixth sentence saying that you wont use hydra for immoral or illegal purposes.

25.   Log into your user account in Host machine.

26.   Consider the following scenario:

1. You know that you have a machine that is live (means it is ON). You have the IP address, but you cannot log into it because you do not have a password. Your second user account in guest is that machine for this case.

2. You also know that ssh port is open in that machine. (Possible attack vector, right?)

3. What possible approach can you think of in this case to log into the second guest user account? Mention any two ways you can think of to log into the second guest user account without knowing the password.

27.   We will use a tool called Hydra. You might have studied already about this. Here we will create a password file that is the fed into Hydra. In the file password.txt, put in at least 10 random passwords in 10 lines. Put 11th line as the correct password for second guest user account. Use the following command: hydra -l <secondguestusername -P

 <password.txt ssh://<ipofguest -s <portnumber Replace the secondguestusername with the actual user name that you want to crack as, supply the ip of guest in ipofguest . portnumber is the port that you want to target. Default is 22 for ssh, so use 22.

28.   Take screenshot of successful login.

29.    Repeat 27 for the first user account root in guest machine. You may need to modify the password file.

30.   Take screenshot of successful login.

31.   Exit from your odroid into echo machine.

32.   Perform 27 to perform attack on your odroid from echo.

33.   Take screenshot of successful login.