Install Nmap and Perform Port Scanning

Introduction

In this lab, you will learn the basic functionality of Nmap, a powerful network scanning and security auditing tool. You'll install Nmap and use it to discover open ports on a local machine.

Additionally, you will gather detailed information about the services running on those open ports, enhancing your understanding of network security and scanning techniques.

Nmap Installation and Port Scanning

Before we start exploring network scanning, it's essential to understand that network scanning is a crucial technique in cybersecurity. It helps us find out what services are running on a network and which ports are open. Ports are like doors in a network; they allow different types of data to enter and leave a system. For example, web servers usually use port 80 for HTTP traffic.

Now, to perform network scanning, we need the right tools. In this case, we'll use Nmap, which is a powerful and widely - used network exploration and security auditing tool. It can help us discover open ports and the services running on them. So, we'll first install Nmap on our system and then use it to perform some basic scans on our local machine. This way, we can gain insights into what services are running and potentially exposed, which is important for identifying security risks.

Tasks

1. Install Nmap on your Ubuntu Linux system
   • Installing Nmap is the first step. Ubuntu is a popular Linux distribution, and it has a package manager called apt that makes software installation easy. By installing Nmap, we'll have the tool we need to start scanning our network.
2. Use Nmap to scan for open ports on localhost (127.0.0.1) within the range of 1 - 10000
   • The localhost address 127.0.0.1 refers to our own machine. Scanning this address helps us understand what services are running on our local system. We'll scan ports from 1 to 10000 because many common services use ports within this range. For example, SSH often uses port 22, and FTP uses ports 20 and 21.
3. Perform a version scan on all open ports discovered to get detailed information about the running services
   • Once we've found the open ports, a version scan will tell us more about the services running on those ports. Knowing the service version is important because it can help us identify if there are any known vulnerabilities associated with that version.

Requirements

• Execute all commands in the /home/labex/project directory using the zsh shell
  • The /home/labex/project directory is where we'll work. Using the zsh shell provides a more user - friendly and feature - rich command - line environment compared to some other shells.
• Use the Ubuntu package manager (apt) to install Nmap
  • The apt package manager in Ubuntu is a reliable way to install software. It takes care of downloading the necessary files and dependencies for Nmap.
• For the initial port scan, use Nmap's port range specification feature
  • Nmap has a feature that allows us to specify a range of ports to scan. This is useful because we don't want to scan all possible ports, which would be time - consuming. By specifying the range from 1 to 10000, we can focus on the most relevant ports.
• Use Nmap's version scanning feature to get detailed information about discovered services
  • Nmap's version scanning feature sends special probes to the open ports to determine the service name and its version. This information is crucial for security analysis.
• Record the port number, service name, and version information of any discovered services
  • Recording this information helps us keep track of what we've found. It can be used for further analysis, such as checking if the services are up - to - date or if they have known security vulnerabilities.

Example

After completing the tasks, you should be able to answer questions like:

1. How many open ports did you discover within the specified range?
   • This question helps you understand the security posture of your local system. A large number of open ports may indicate a higher risk.
2. What is the port number of an open port you found?
   • Knowing the port number is the first step in understanding what service is running. Different services use different ports.
3. What type of service is running on this port?
   • Identifying the service helps you determine if it's necessary for your system and if it's configured securely.

Ensure you use the appropriate Nmap commands to gather all required details.

Summary

In this lab, you have learned how to install Nmap and utilize it to discover and analyze services running on your local machine. This hands - on experience showcases the essential steps of using Nmap for network discovery and service detection.

It encompasses package installation, basic port scanning, and version detection, laying a solid foundation for understanding network scanning techniques.