Network Scanning with Nmap & Metasploit
Uploaded by
Basant Raj KheriwalNetwork Scanning with Nmap & Metasploit
Uploaded by
Basant Raj Kheriwal1 Network Scanning Using Various Network Tools
Project Title: Network Scanning Using Various Network Tools
Submitted by:
Name: Basant Raj Kheriwal
Course: Ethical Hacking
Trainer Name: Harsh Vardhan Dubey (Forensic Investigator)
Submitted to:
Samayak Computer Classes
Date of Submission: 02/02/2025
Perform Network Scanning Using Various Scanning Tools
Objective:
The goal of this project is to perform active and passive network scanning using different
tools like Nmap and Metasploit Framework. The aim is to identify live hosts, open ports,
services running, and system details within a network.
Tools Used:
• Metasploit Framework (msfconsole)
• PostgreSQL Database (for msfdb)
• Nmap (Network Mapper)
• Kali Linux Terminal
Lab Environment:
• OS: Kali Linux (root access)
• Network: Local Network ([Link]/24)
• Interface: eth0
• Target Machine: Windows10 Pro VM
• Metasploit Database: PostgreSQL
2 Network Scanning Using Various Network Tools
Step-by-Step Procedure:
1. Start PostgreSQL & Initialize Metasploit Database
• Enter this command --→sudo su
• Now open --→msfconsole
• Enter this command ----→ service postgresql start
• Note: There is no any connection is showing here.
• now open msfconsole and enter this command --→msfdb init
3 Network Scanning Using Various Network Tools
2. Open Metasploit Console
Now open Msfconsole
Run Nmap Scan from within Metasploit
nmap -Pn -sS -A -oX Test [Link]/24
4 Network Scanning Using Various Network Tools
This performs a SYN scan with OS and version detection, saving output in XML format.
4. Import Nmap Scan Results
5 Network Scanning Using Various Network Tools
db_import [Link]
5. Search for Port Scanning Modules in Metasploit
search portscan
6. Use SYN Port Scanner
6 Network Scanning Using Various Network Tools
• use auxiliary/scanner/portscan/syn
• set INTERFACE eth0
• set PORTS 80
• set RHOSTS [Link]
• set THREADS 40
• run
7. Use TCP Port Scanner
Enter this command --→ back
Now use this auxiliary by this command ---→use auxiliary/scanner/portscan/tcp
8. SMB Version Detection
7 Network Scanning Using Various Network Tools
• use auxiliary/scanner/smb/smb_version
• set RHOSTS [Link]
• set THREADS 1
• run
Observation & Output:
• Detected Live Hosts on the network
• Identified open ports (e.g., 80, 445)
• Found services running on specific ports
• Extracted SMB version of target host
• All results were saved and screenshots were taken for documentation
Conclusion:
This activity helped understand how to gather detailed information about systems on a
network using both automated tools and manual configurations.
Tools like Nmap and Metasploit’s scanners are powerful for initial reconnaissance and
vulnerability assessment.
8 Network Scanning Using Various Network Tools
Network Scanning using Angry IP Scanner
Objective
To discover live hosts, open ports, and analyze network activity using Angry IP Scanner.
Tools Used
• Angry IP Scanner
• Windows OS
• Local Network ([Link]/24)
Steps Performed
Step 1: Launch Angry IP Scanner
I started Angry IP Scanner and entered the IP range:
From: [Link]
To: [Link]
9 Network Scanning Using Various Network Tools
Then I clicked on the Start button to begin scanning the network.
Step 2: Identifying Live Hosts
Angry IP Scanner scanned the network and highlighted live devices with green or blue
indicators.
Live hosts had low ping times, showing they were active and responding.
10 Network Scanning Using Various Network Tools
Step 3: Using Filters
To analyze more effectively, I used built-in filters from the toolbar:
• Live Hosts Filter – showed only the active devices.
11 Network Scanning Using Various Network Tools
• Dead Hosts Filter – showed IPs that didn’t respond.
12 Network Scanning Using Various Network Tools
• Open Ports Filter – displayed devices with open ports (especially port 80).
Step 4: Exploring Preferences
I explored Preferences for additional scanning settings:
• Changed maximum threads to improve speed.
• Adjusted delay between threads for network stability.
• Set the port list to focus on important ports like 80, 443, etc.
13 Network Scanning Using Various Network Tools
Results:
• Successfully found active devices in my network.
• Detected multiple hosts with open port 80, indicating active web servers.
• Used filters to categorize hosts based on their responses.
• Improved scan performance by tweaking thread settings.
Conclusion:
Angry IP Scanner is a powerful, lightweight tool for quick network analysis.
Using its features like filters and thread settings, I efficiently scanned the network and
gathered useful data on live hosts and open ports.