We’ll then configure Wireshark and run a packet captures to get a sense for the normal traffic on the network, and then run another capture to analyze just how an nmap network scan works.īefore we can scan the network with nmap, we need to identify the ip address range we would like to examine. We are first going to use nmap to see if we can identify any such devices on the network, and perhaps detect one or two that we did not think or know were connected to it. There may also be more computers or cell phones connected to it, and maybe even your television, refrigerator or coffee maker! At the very least, we know there will be at least three: the Kali guest, the host machine you are running Kali on, and your router.

Do you happen to know how many devices are currently connected to your home network? Can you identify all of them off the top of your head? Try to do so, and make a list of them. Dumpcap is a command line network traffic monitor, and Wireshark provides a powerful and versatile graphical interface to monitor network traffic and analyze network packet capture files. Nmap is a command line network scanner, and Zenmap is a graphical interface to nmap. These will come in handy in our eventual testing lab, but they can obviously also be used to explore your home local area network as well. In particular, we’ll take a look at a set of tools that come bundled in Kali that can be used for network analysis: nmap/Zenmap and dumpcap/Wireshark. This article will show how some of the tools that come bundled in Kali can be used to explore your existing home computer network, and test whether you can successfully identify all the devices that are connected to it. But if you’re like me, you’re probably already itching to start playing with all the toys Kali has to offer, if you haven’t already! Finally, your Kali VM has a single network adapter running in bridged mode and you have set up an administrator account on the Kali instance.Ĭreating and configuring the virtual network setup outlined in the introduction, which we will do in part three of this series, requires a few more steps: we still have to download and install Metasploitable, set up the virtual network, etc. The Kali system has been fully updated and VirtualBox Guest Additions have been installed on it. If you followed along in part one, installing a Kali Linux virtual machine in VirtualBox, you have installed VirtualBox on the primary computer for your home lab and created a Kali Linux virtual guest on this host machine. It allows them to pester me at home more easily, so I'm well aware of that device.This article is part two in our tutorial series on how to set up a home hacking and security testing lab. The Avaya device is a Voice Over IP phone that provides me with an extension on the telephone system at head office. There's a couple of devices listed as manufactured by Dell. The only Samsung device I have is a laser printer, so that narrows that one down. The Amazon Technologies device will be my Echo Dot. Raspberry Pi Foundation is self-explanatory. What some of these devices are is clear to me. These are the ones we need to investigate further. When you look through your results, you will likely see devices that you recognize. Or, as we shall see, we have what nmap has reported as the manufacturer, to the best of its ability. We know the manufacturer for some of them. There are 15 devices switched on and connected to the network. We've established a list of the connected network devices, so we know how many of them there are. The parameter '192.168.4.0/24' translates as 'start at IP address 192.168.4.0 and work right through all IP addresses up to and including 192.168.4.255'. The '/24' tells nmap to scan the entire range of this network. That is the first possible IPAddress on this network. The IP address we're going to use is the one we obtained using the ip command earlier, but the final number is set to zero. Don't be surprised when nothing visible happens for a minute or so. It does all of its probing and reconnaissance work first and then presents its findings once the first phase is complete. Of course, the more devices you have on the network, the longer it will take.

It will do a lightweight, quick scan.Įven so, it can take a little time for nmap to run. This tells nmap to not probe the ports on the devices for now. We're going to use the -sn (scan no port) option. It can deduce a lot about the device it is probing by judging and interpreting the type of responses it gets. It works by sending various network messages to the IP addresses in the range we're going to provide it with it.

Kali linux network scan