‫So one of the maps best known features is remote detection, using TCP, IP stack fingerprinting and
‫maps and a series of TCP and UDP packets to the remote host and examines practically every bit of the
‫responses.
‫After performing dozens of tests, such as DCPI Essene sampling TCP option support and ordering IPID
‫sampling and the initial window size check and map compares the results to it and map os DBE database
‫of more than 2600 known OS fingerprints and prints out the OS details if there's a match.
‫Each fingerprint includes a free form textual description of the OS and a classification which provides
‫the vendor name.
‫For example, sun underlying OS.
‫That would be Solares OS generation let's say 10 and device type general-purpose routers which game
‫console whatever OS detection is far more effective if at least one open and one closed TCP port are
‫found.
‫So let's see the U.S. detection in action.
‫We have to use voice detection with one of the port detection techniques, so I use in scan for this
‫demo.
‫The target system is medicine voidable, that's Joo's top 100 ports to make the query faster or just
‫don't give any port at the maps can top 1000 ports.
‫That won't take long.
‫Put uppercase O four OS detection and hit enter.
‫Here is a result of OS detection.
‫It's a general purpose device and running Linux with a version between two, not six, not nine and
‫two.
‫Not six, not three, three.
‫If you would like Unmap to be more aggressive, to have a more accurate result, you can use Özkan guess
‫parameter with O OS detection parameter.
‫Now, let's scan a window system and try to find out the version of the OS, so here I have a Windows
‫eight virtual machine.
‫I want to learn its IP address first over the command prompt type IP config and hit enter.
‫Now, let's go to college and test if we can reach the window system.
‫First, helping the system know the system is not responding to the ping requests or we cannot reach
‫the system.
‫So second, I perform an end mapping scam.
‫We know how to do it right type and map as NN one seven two dot one six nine nine one seven one and
‫hit enter.
‫Yes, and Matt says the host is up, so we are able to reach the system.
‫Now I want to scan the top 10 TCP ports of the system.
‫I add the reason parameter to see the reasons of the results.
‫All the ports we scanned are filtered because there are no responses from them.
‫It's not good for us.
‫So I had the best detection to the latest and map query and rerun it.
‫No, and Map cannot find the lost details because it does not have a ResultSet to probe or interrogate.
‫I would like to open a port on the Windows system and reply the unmap scans and Windows eight VM, I
‫run the IIS Internet Information Services Manager.
‫And start to host the default website of ISIS.
‫Open a Web browser and try to reach the website, typing the IP address of the system into the address
‫bar.
‫OK, Web service is up.
‫Let's test if I can reach the website from Colly.
‫I go to Cali, open a browser, enter the IP address of the Windows eight VM and hit Enter.
‫No, I cannot, and I think I know the reason.
‫In Windows VM, let's look at the firewall if http traffic is allowed.
‫So I open the firewall at the upper left corner, I click allow an app or feature through Windows Firewall
‫Link.
‫Quick change settings, which needs to have admin privileges go to the end of the list, as I thought,
‫HTTP services are not allowed, check it and click OK to apply the changes.
‫Now in a command prompt to support 80 Irun net stat and command.
‫When I come back to Cali, I see that the page is loaded in the browser, that means Colly can reach
‫Port 80 of my Windows eight PVM.
‫Now in Terminal Scream, I want to run since scan for the Windows system's top 10 ports.
‫Here we have an open port now, so let's reply the scan with OS detection option.
‫Now we have the U.S. detection result.
‫First and Map warns us about the results.
‫It says the results may be unreliable because it couldn't find a closed port to probe anyway and map
‫makes it best.
‫And here it says the operating system is one of them.
‫Windows 2008, Windows eight, not one, Windows seven, Windows Phone or Windows Vista.
‫Good job.