HackerSploit here back again with another video, in this video, we are going to be looking at how to perform network discovery with netdiscover to. Evidenced through the classic 'I'm a Mac' ads. A network discovery tool that sends ARP packets to a target device or IP range and sniffs the network for responses to identify the. 日期：2019-06-27 15:54:19 作者：Bay0net 介绍：在 mac os 下，如何安装 netdiscover 及基本使用方法 0x01、当前环境 MAC os 10.14.4 已安装 brew 0x02、安装方式 使用.
Quite often, people will ask me where they should start in Hacking. Oh my gosh! There are soooo many topics, subjects, ideas, things to memorize, things to mess with, etc… It is much too difficult to tell someone where to start. Ummmm… I guess I might say you can start with reconnaissance. Or, if stuff in this article doesn’t seem to make sense, you should probably start with a networking basics course. So, first you will want to find out about the other computers around you on a network. There are numerous ways to do this, but in this tutorial I will show you how to use a tool built into BackTrack / Kali that leverages Address Resolution Protocol or ARP to discover live hosts on the network.
As you know, ARP is used to map MAC addresses to IP addresses on an internal network. The router and switches send out broadcast ARP requests to all the MAC addresses on the network asking them to respond with their IP addresses. Each system will then respond with their IP address and the switch or other device will then create a small database that maps the MAC to the IP address, so that it it knows “who is who”.
We can use this same protocol to discover the IP addresses on a corporate, educational, wireless or other network by using Netdiscover. Its a simple tool that simply sends out ARP’s—just like a switch or router would—asking for everyone’s IP address on the network. In this way, we can gather the IP’s we need and then to attack those machines with a MitM attack, Metasploit or other attack.
Before we get started, let’s open Wireshark and look at some normal network traffic. As you can see in the screenshot below, once we open Wireshark and just wait a short while, I begin to send ARP requests. Packets 2113 and 2114 show an ARP exchange. If you look at 2113 and then scan across to the info section to the far right, you can see “who has 192.168.1.1?”. In the following packet, we see the response “192.168.1.1 is at xx:xx:xx:xx:xx:xx”. That is normal ARP traffic.
We can now create a filter in Wireshark to just look for ARP tarffic by typing “arp” in the filter window at the upper left. Now, all we see is ARP traffic as Wireshark has filtered out everything else.
Now that we see a bit of normal ARP traffic and how it works, let’s fire up BackTrack and abuse the ARP protocol to learn the IP and MAC addresses of everyone on the network.
Netdiscover Mac Os X
Step 1: Find Netdiscover
We can find netdiscover by going to either Backtrack or Kali.
In Kali, go to the Kali Linux Menu –> Information Gathering –> Live Host Identification –>Netdiscover
In Backtrack, go to the Backtrack Menu –> Information Gathering –> Network Analysis –> Identify Live Hosts –> Netdiscover.
Step 2: Open Netdiscover
When we click on netdiscover, it opens a screen like that below and displays some basic help. Netdiscover is a relatively simple tool, so there are not a lot of options.
Step 3: Netdiscover Command
To discover the IP’s on an internal network, we will usually want to scan a range of IP addresses. In netdiscover, we can use the -r switch (for range) and then in CIDR notation provide it the network range we want it to scan. In the command below, we are asking netdiscover to find all the live hosts with IP addresses between 192.168.1.1 to 192.168.1.255. We do this by typing;
netdiscover -r 192.168.1.0/24
Step 4: Activate Netdiscover
As soon as we enter the command, netdiscover begins sending out ARP requests over the network and then logging the results on our screen. The process is live and interactive, so that as soon as new machines come on the network they pop up on our screen.
Netdiscover is a simple but powerful tool that uses the ARP protocol to discover live network hosts. As long as you are connected to the network and ARP is enabled on the network, you should be able to discover every live host’s IP and MAC address. Once you have those, then you can begin your strategy of exploiting those hosts.
How to find internal and external IP addresses on Mac OS X and macOS?
An IP (Internet Protocol) address is assigned whenever your device connects to the Internet or a local network. The most frequent form of an IP address is four sets of digits with three digits per set. If your computer is connected to both a local network and the Internet, it will have an internal IP address signed by a local network and external IP address, which is the address of your Internet connection.
If you are setting up a network or sharing files, the IP address is required. In this article, we show a number of ways to find a Mac IP address. This guide applies to any version of Mac OS.
Table of Contents:
It is recommended to run a free scan with Malwarebytes - a tool to detect malware and fix computer errors. You will need to purchase the full version to remove infections and eliminate computer errors. Free trial available.
Find your internal IP Address through System Preferences
The first method, which will work on any operating system version, is to visit Network configuration in System Preferences. Open the Mac system preferences and locate Network, click on the network you are connected to, and below the Status line you will see your IP address.
For detailed information click Advanced and select TCP/IP tab where you will find more information about your network.
Find out your internal IP address by using Terminal
This method is easier and faster for Mac users who are familiar with a command line program called Terminal. Even if you have not used Terminal before, just follow the instructions and you will find the internal IP address. First, use spotlight by pressing Command and Spacebar and type Terminal. Then, press Return. Alternatively, you can find Terminal under the Utilities folder. Open finder, choose Applications, select Utilities, and then launch Terminal.
When Terminal has launched, type the following command: ipconfig getifaddr en0 (to find your IP address if you are connected to a wireless network) or ipconfig getifaddr en1 (if you are connected to an Ethernet). If you are using Mac OS X, the command ipconfig |grep inet displays detailed information about your computer signification in the network. The IP address is usually displayed beside last inet, however, this command does not work on macOS High Sierra.
Find your external IP address
To find your external IP address, there are two easy methods that work on all versions of the Mac operating system. First, open Google and Type IP in search. This will display your external address.
Mac Os Catalina
If you can browse the Internet, use the Mac command line. Launch Terminal, which is under the Utilities folder, and type: curl ifconfig.me or curl ipecho.net/plain ; echo. These commands will display your IP address in Terminal.