1. How would you determine the university’s Internet Protocol (IP) address range?
a. Log in to university workstation either from any computer on campus or by creating a VPN in my PC and connecting to passport.missouristate.edu.
b. Run the ipconfig command to analyze the IP address and subnet that gives the addressing schema for the network.
2. What information can you retrieve from the Domain Name System (DNS)?
From the DNS, the following information can be retrieved
a. Number of servers and workstations deployed on the network.
b. IP address related to a certain domain
c. Zone file of DNS server might have information of domain or sub domains
3. How would you fingerprint the network?
To fingerprint the network, you might need any of the following software.
• Nmap (Network Mapper) -security scanner used to discover hosts and services on a computer network, comprehensive active stack fingerprinting.
• Ettercap – computer network protocol analysis, passive TCP/IP stack fingerprinting.
• …show more content…
What challenges you might encounter in your scans?
One big problem that you might encounter is when there is a IDS/IPS or if the network is split into segments via a DMZ. In any of the possible cases as described above you might not be able to scan the network which would make it harder to fingerprint. The other challenge might be false positives and an unclear trail that leads nowhere. https://en.wikipedia.org/wiki/Intrusion_prevention_system https://en.wikipedia.org/wiki/Intrusion_detection_system
8. What data might be missing, and why?
Items that could be missing are the name and responsibility of different network devices. If they are unknown it might be harder to find out where they are and takes a lot of time. Most of the times the information might be missed due to unorganized publishing sites and also due to protected malware security that might bypass some critical information.
Follow: citation style
a. Log in to university workstation either from any computer on campus or by creating a VPN in my PC and connecting to passport.missouristate.edu.
b. Run the ipconfig command to analyze the IP address and subnet that gives the addressing schema for the network.
2. What information can you retrieve from the Domain Name System (DNS)?
From the DNS, the following information can be retrieved
a. Number of servers and workstations deployed on the network.
b. IP address related to a certain domain
c. Zone file of DNS server might have information of domain or sub domains
3. How would you fingerprint the network?
To fingerprint the network, you might need any of the following software.
• Nmap (Network Mapper) -security scanner used to discover hosts and services on a computer network, comprehensive active stack fingerprinting.
• Ettercap – computer network protocol analysis, passive TCP/IP stack fingerprinting.
• …show more content…
What challenges you might encounter in your scans?
One big problem that you might encounter is when there is a IDS/IPS or if the network is split into segments via a DMZ. In any of the possible cases as described above you might not be able to scan the network which would make it harder to fingerprint. The other challenge might be false positives and an unclear trail that leads nowhere. https://en.wikipedia.org/wiki/Intrusion_prevention_system https://en.wikipedia.org/wiki/Intrusion_detection_system
8. What data might be missing, and why?
Items that could be missing are the name and responsibility of different network devices. If they are unknown it might be harder to find out where they are and takes a lot of time. Most of the times the information might be missed due to unorganized publishing sites and also due to protected malware security that might bypass some critical information.
Follow: citation style