January 11, 2018

KH 364: You Feeling Lucky? - NMAP, RasPi, Nerf, Lazer Tag, IR, and more...

1 hour

Fr. Robert Ballecer and Patrick Delahanty show you how to can get information about all the devices on your network, how to turn a Raspberry Pi into a Wi-Fi router, solving filament problems in a 3D printer, and modifying Nerf and Lazer Tag guns.

Nmap Me

"I started a search for a software interrogation program to show all the information about the devices on my network. My search returned some results. But my nerve ending stood on high alert as I started reading about the options within some software available. I was turned off by Wireshark and its complexity. (No disrespect intended to the Wireshark community) Decided a better road traveled would be asking; Has anyone had any experience with this type software and the trust level(from usage)?" - Rud Dog

Fing (Android & iOS)

Basic Networking Mapping

Can do pings & traceroute

NMAP (Windows, macOS, Linux)

nmap is an open source network tool/port scanner that can scan everything from a large network to a single host

It uses raw IP packets to let us know what hosts are available on a network, what ports they have open, what OS they are running and dozens of other parameters available to those who are willing to dive into the network protocols.

Quick Notes:

Basic Commands

When you install NMAP on Windows, its going to install "WinPcap" service (Windows Packet Capture) service -- Allow the install and let it run on startup.

I'm running all these commands in a shell that has root

There's a GUI, but I prefer the command line

Discover all IPs in a subnet

"nmap -sP x.x.x.x/y" (This is a "ping scan")

Where 'x.x.x.x' is the IPv4 address of the subnet you want to scan

Where 'y' is the size of your address space

For example: If I use "ipconfig /all" to determine that I have an address of 192.168.0.76 and a mask of 255.255.255.0

I know my subnet is 192.168.0.0

My subnet size is /24

so I would use the command "nmap -sP 192.168.0.0/24"

You can also use wildcards and ranges (Ex: "nmap 192.168.1.1-50" or "nmap 192.168.1.*")

This tells nmap to send a icmp echo request to ports 443, and 80 to all addresses within the specified subnet.

This only gives us a list of devices that respond to that request

NOTE: Just because a device doesn't respond, that doesn't mean it's not there.

Identify Hostnames

"nmap -sL x.x.x.x/y"

This will send a packet to all the hosts in the range and return their reported network names

Identify the Operating System

"nmap -O x.x.x.x"

This will attempt to identify the OS of the host

Scanning for Open Ports on a specific host

"nmap x.x.x.x"

This will look at a specific host and tell you what ports are open on that host

Show Host Interface and Routes

"nmap --iflist"

Verbose!

Add "-v" to find out what's happening

Saving your scan to a text file

"nmap 'whatever you choose to do' > output.txt

RasPi WiFi Router

"I've made a recent post about using a raspberry pi as a tor box and I figured that I don't need the tor part. So does anyone know how to turn a raspberry pi into a WiFi router on raspbian. Any support will be great!!" - Michael

Turning a Raspberry Pi into a Wireless AP

Image Raspbian onto your SD card

Expand the volume

Open Terminal

"sudo raspi-config"

Select option 7

Select A1

Change the default password

Select option 1

RasPi will reboot

Turn your RasPi into an Access Point

A GIT user by

Fil

These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/know-how/episodes/364

Hosts: Fr. Robert Ballecer, SJ and Patrick Delahanty

Sponsors:

thetrackr.com/knowhow

eero.com code KNOWHOW

...more

View all episodes

By TWiT

4.5

3535 ratings