CIS 403Project Part 1_ Reconnaissance_Fuhrer.docx

Project Part 1: Reconnaissance Christopher Fuhrer ECPI University CIS403 To start off, I will first login to Kali Linux and start my passive mode reconnaissance. I This study source was downloaded by from CourseH on 12-09-2021 23:42:24 GMT -06:00 This study resource was shared via CourseH can also use tcpdump to analyze the packets. Most of the IP addresses announce themselves on the network, without doing any type of scan. User Datagram Protocol (UDP) NetBIOS Datagrams are sent to the network broadcast address. Address Resolution Protocol uses the broadcast MAC address of FF:FF:FF:FF:FF:FF. These broadcasts are sent to all machines within a single broadcast domain; meaning ARP broadcasts are not forwarded off a LAN segment. This can also be categorized as passive sniffing of the network. Another way we can listen passively on the internal network is by using Wireshark. c Create capture file of passive reconnaissance of network. This study source was downloaded by from CourseH on 12-09-2021 23:42:24 GMT -06:00 This study resource was shared via Cours