Ready to see your network the way an attacker sees it?
This short series is for the network administrator who has a grasp of networking, but knows less about security. You might be the Natalie in Natalie’s Graphic Design, or the all-in-one IT department / PC help desk / Webmaster. Maybe you haven’t used command line tools before. But if your network has more than nine devices, you can no longer hold your network in your head. You need a way to quickly and reliably find out:
- How many computers do I have on my network, and what are their IP addresses?
- What network services (distinguished by open ports) does each computer offer?
- What operating system (OS) runs on each computer?
Answering these questions is known as enumeration, or mapping your network. Enumeration is the first thing a savvy attacker does when trying to take over your network — so you might as well beat ‘em to the punch. Enumerating your network helps you identify and close unnecessary services, improving your security. It also tells you what kinds of OS and applications you’re running, so that you can keep up with the proper security patches.
Enter the port scanner, a special network-mapping tool that quickly and easily answers all three of these questions for you. Port scanners come in many flavors and prices, but in essence, a scanner sends an avalanche of packets to an IP address (or IP addresses) in order to learn which IPs are active, what ports each IP listens on, and (in some cases) what OS each IP uses. Then the scanner reports the results to you.
Nmap, short for Network Mapper, is one of the most popular and powerful port scanners on the market. Fyodor, a well-respected white hat hacker, originally created Nmap. Since its inception, many security experts have built upon Fyodor’s open source tool, making it one of the most powerful and advanced port scanners around.
So how much does all this technology and power cost you? Nothing. All you need is the courage to download and install it… and a little bit of know-how, which we intend to provide in this three-part series.