Instructor: In this lesson, we're going to talk about 2 2
the Angry IP Scanner. 3 3
Now, the Angry IP Scanner is a popular open source tool 4 4
that's used by cybersecurity analysts 5 5
for network scanning and reconnaissance. 6 6
This tool can be used to quickly scan an IP range 7 7
to determine which hosts are active, 8 8
as well as gather information about the hosts that are found 9 9
such as their host name, operating system, 10 10
open ports and running services. 11 11
This information is crucial 12 12
for identifying potential vulnerabilities 13 13
and planning security measures to protect a network. 14 14
Now, one of the main uses of the Angry IP Scanner 15 15
is for reconnaissance and enumeration. 16 16
This is the process of gathering information 17 17
about a target network such as the IP address, 18 18
the host names, and the open ports 19 19
before attempting to exploit any vulnerabilities 20 20
as a penetration tester or cybersecurity analyst. 21 21
By using a tool like the Angry IP Scanner, 22 22
cybersecurity analysts can quickly and easily 23 23
scan a target network to identify live hosts and open ports, 24 24
which can then be further investigated 25 25
for potential vulnerabilities. 26 26
Now, another use of the Angry IP Scanner 27 27
is in identifying rogue or unauthorized devices 28 28
on a given network. 29 29
By regularly scanning a network, 30 30
a cybersecurity analyst can identify devices 31 31
that are not supposed to be connected, 32 32
such as unauthorized wireless access points 33 33
or unauthorized servers. 34 34
This can help to prevent security breaches and data breaches 35 35
by identifying and removing these devices 36 36
before they can be used to gain unauthorized access 37 37
to a given network. 38 38
In addition to identifying live hosts and open ports, 39 39
the Angry IP Scanner can also be used to gather information 40 40
about operating systems and running services on a network. 41 41
This information can be used to identify 42 42
potential vulnerabilities that are specific 43 43
to a particular operating system or service, 44 44
such as Windows or Linux, or Apache or IIS 45 45
in terms of web services. 46 46
For example, if a cybersecurity analyst 47 47
discovers that a network has several hosts 48 48
that are running an outdated version of Windows, 49 49
they can take steps to update and patch those systems 50 50
to protect them against known vulnerabilities. 51 51
Another feature that makes the Angry IP Scanner 52 52
quite useful is its ability to perform a ping sweep. 53 53
Now, a ping sweep is a technique 54 54
that's used to detect active hosts on a given network. 55 55
It's done by sending an ICMP echo request packet, 56 56
known as a ping, to each IP address in a range 57 57
and if a response is received, 58 58
that host is considered to be active. 59 59
This is a really quick and easy way 60 60
to identify live hosts on the network 61 61
and can be really useful in identifying hosts 62 62
that are not responding to other types of scans. 63 63
Another great use of the angry IP Scanner 64 64
is during an incident response. 65 65
For example, if you're working 66 66
as a cybersecurity analyst or incident responder, 67 67
your goal during the containment phase 68 68
is to limit the damage 69 69
and prevent the incident from escalating. 70 70
By using the Angry IP Scanner, 71 71
you can quickly identify which systems and network segments 72 72
are being affected, and this will more quickly allow you 73 73
to isolate them from the rest of your network, 74 74
which prevents the spread of the malware 75 75
or other malicious code to those other active systems. 76 76
Finally, the Angry IP Scanner can also be used 77 77
during the recovery phase of an incident response 78 78
if you're working as a cybersecurity analyst 79 79
or incident responder to restore normal operations 80 80
and then remediate all those vulnerabilities 81 81
that may have been discovered. 82 82
With the information you get from the Angry IP Scanner, 83 83
you're going to be able to determine which systems and services 84 84
need to be restored and in which order 85 85
in order to minimize the disruption 86 86
to your business operations. 87 87
So as you can see, 88 88
the Angry IP Scanner is a really powerful tool 89 89
that can be used to aid in our reconnaissance, enumeration 90 90
and incident response efforts 91 91
to quickly identify live hosts and open ports on a network, 92 92
identify rogue or unauthorized devices, 93 93
gather information about operating systems 94 94
and running services, perform ping sweeps 95 95
and aid in the incident containment and recovery phases. 96 96
By using the Angry IP Scanner 97 97
a cybersecurity analyst can more effectively 98 98
identify and respond to security incidents, 99 99
minimize the impact on business operations 100 100
and restore operations back to normal once again.