All right, good afternoon. We are going to mess around with
NTO today kind of a precursor. The
very first thing I need to realize is that NIC
is a command-line interface tool, which means I need to open up terminal.
Let me pull that up for you.
Uh And let's just get a sense of NIC.
Nic
is NIATO.
I'm gonna do a dash H or attack H.
That's gonna give me this basic manual of how to perform different attacks.
I really don't want to say tax, tax is a wrong word.
Uh We're going to do some different scans against the server that I've got in my
virtual system. So I am currently running
a Kops
two system in the background
which my
Hally box is has direct access to, right? So we already did
the scan, we've already identified the IP address for this specific machine.
So now we just need to run NIC to against it to find some vulnerabilities.
So the very first thing I want to do is I'm gonna do N I
CTO dash H and I need to hit the IP address in my case,
it's 10.0 0.2 0.5.
I want to remind you
this IP address could be different depending on how you have your network set up,
depending on what you scan for that
Kops machine. So
be aware of that IP address, you need to scan for it.
I'm gonna hit enter
and it's gonna give me some basic information.
It's gonna say, hey, here's the target IP address.
Here's the hostname operating on port 80. The time that I did the uh the scan
and it says a it's running Apache
right there.
It's moved and it's seen a little bit, it's seen a little bit of uh problems, right?
See anti clickjacking is not there
and it's going through and it's just looking for different aspects
or different vulnerabilities that it might fight and it's just going to continue to
run in the background until it's found everything or until it's completed its scan.
We can see here that PHP reveals potentially sensitive information,
so on and so forth, right?
And we can start to see the Apache default file bound, which is not good.
So it provided me with all these different items and when it's done,
it says that it reported 17 items and had one error.
If you scroll up,
you can see the error right there, right?
So
that's just checking out that I want to show you one other scan, right?
We're gonna do a NIC
and then again that dash H
the IP address
like cell
but then we're gonna do a basic scan for SSL. We want to look for SSL vulnerabilities.
So I'm gonna hit that little tack right there.
It enter and now it's gonna start scanning
for SSL vulnerabilities and it's gonna do pretty much the same thing it did before
except now we've said, hey, I want you to concentrate specifically on
those SSL VARB.
OK.
That's gonna go through and continue scanning.
I also want to point out that it changed its port when I did SSL,
it went from port 80 which is HTTP over to port 443,
which is HTTPS
and there's a reason for that,
right? The SSL
points out that hey, I'm looking specifically for
that HTTPS point.
However, we are seeing a lot of the same errors as before,
right? Anti clickjacking
not present
uses S TLS strict transport layer, not defined. That's the issue.
We're seeing a content type header is not set. That's a problem.
All right. So that is NIC
do in a nutshell. Feel free to mess around with it.
The best way to learn these tools,
all these tools we're showing you the best way to
learn it is to actually mess around with it.
Start diving into it, use those virtual machines
and learn these tools.
That's the best way to get a good handle on what you're doing,
how the tool works and how it interfaces with you as a
security analyst are going to be dealing with in the future.
Uh, I know this is s, and we'll see you next time.