Perform Reconnaissance with NMAP (credit to MindTap)

 You work as a security analyst for a small corporation. Your manager has asked you to check the external servers of a potential partner's company for potentially vulnerable ports. The company hosts an external web server at www.partnercorp.xyz.

In this lab, your task is to perform reconnaissance on the PartnerCorp external servers to find potentially vulnerable ports as follows:

On Analyst-Lap

• Use the whois.org website to determine the domain name servers used by PartnerCorp.xyz.
  • Answer Question 1.
• Use nslookup to determine the primary web server address.
  • Answer Question 2.

On Analyst-Lap2

• Use Zenmap to search for 50 of the top ports opened on the network identified by nslookup above.
• Answer Question 3.

EXPLANATION

Complete this lab as follows:

1. From the Analyst-Lap computer, find the domain name servers used by partnercorp.xyz.
   1. From the taskbar, select Google Chrome.
   2. Maximize the the windows for better viewing.
   3. In the URL field, type whois.org and press Enter.
   4. In the Search for a domain name field, enter partnercorp.xyz.
   5. Select Search.
   6. In the top right, select Answer Questions.
   7. Answer Question 1.
2. Find the IP address used by www.partnernetcorp.xyz.
   1. Right-click Start and select Windows PowerShell (Admin).
   2. At the PowerShell prompt, type nslookup www.partnercorp.xyz name_server (see the answer to question 1) and press Enter.
   3. Answer Question 2.
   4. Minimize the Lab Questions dialog.
3. Use Zenmap to run an Nmap command to scan for open ports.
   1. From the navigation tabs, select Buildings.
   2. Under Blue Cell, select Analyst-Lap2.
   3. From the Favorites bar, select Zenmap
   4. Maximize Zenmap for easier viewing.
   5. In the Command field, use nmap --top-ports 50 73.44.215.0/24 to scan for open ports.
   6. Select Scan to scan for open ports on all servers located on this network.
   7. In the top right, select Answer Questions.
   8. Answer Question 3.
   9. Select Score Lab.