Network Exploration Basics – Practical Lab

Complete all the tasks listed in your Week – 2 Day 1 assignment. You are required to submit all responses in a single document.

Follow these steps for submission:

• Perform all the tasks as instructed in Step 1–14.
• Make of Copy of this Google Doc Template  to write your results
• Paste your screenshots and write your answers (where mentioned) clearly in the Google Doc.
• Make sure to include your name and batch at the top of the document.
• Save the file with this naming format:
• Cybersecurity_Assignment2_YourName.pdf
• Upload the file to the portal under the assignment section.

Requirements:

• Kali Linux or Windows (host or VM)
• Internet connection
• Access to terminal or command prompt

Step-by-Step Tasks

🔹 Step 1: Identify Your IP Address

• Windows: Open Command Prompt →
  ipconfig
• Linux: Open Terminal →
  ip a

📝 Record your IP address and Default Gateway.

🔹 Step 2: Find Your MAC Address

• Windows:
  getmac or check ipconfig /all
• Linux:
  Look for ether under ip a

📝 Write down your MAC address.

🔹 Step 3: Test Internet Connection with Ping

• Command:
  ping google.com -c 4 (Linux)
  ping google.com (Windows)

📝 What is the average latency? Did all packets return?

🔹 Step 4: Trace the Route to a Website

• Linux:
  traceroute google.com
• Windows:
  tracert google.com

📝 How many hops did the packet take? Any timeouts?

🔹 Step 5: Check Open Ports & Services and Close them as well

• Linux:
  netstat -tuln
• Windows:
  netstat -an

📝 List 3 open ports and note which protocols are being used.

🔹 Step 6: OS Fingerprinting and Reconnaissance

• xprobe2 -v 192.168.1.30 # Active OS fingerprinting
• sudo p0f -i eth0 # Passive OS fingerprinting
• nmap -O -T2 –scan-delay 100ms –max-retries 2 192.168.1.30 # OS detection via Nmap
• nmap -sV -T2 –max-retries 1 –scan-delay 100ms 192.168.1.30 # Service version detection
• nmap –script vuln –script-args vulns.showall -T2 192.168.1.30 # Vulnerability scan

🔹Step 7: OS Firewall Management with UFW (Uncomplicated Firewall)

• sudo ufw enable # Enable the UFW firewall
• sudo ufw allow 22 # Allow SSH
• sudo ufw deny 22 # Deny SSH
• sudo ufw allow 80/tcp # Allow HTTP
• sudo ufw delete allow 22 # Delete specific rule
• sudo ufw status numbered # View numbered rule list

🔹Step 8: Packet Filtering with iptables

• sudo iptables -A INPUT -p tcp –dport 80 -j ACCEPT # Allow HTTP
• sudo iptables -A INPUT -p tcp –dport 23 -j DROP # Block Telnet
• # Save rules persistently
• sudo apt install iptables-persistent
• sudo netfilter-persistent save

🔹Step 9: Host Discovery and Scanning

• nmap -sP 192.168.1.0/24 # Ping sweep to find active hosts
• nmap -sV 192.168.1.10 # Detailed service scan
• sudo arp-scan –interface=eth0 –localnet # ARP scan for local devices
• sudo tcpdump -i eth0 # Capture packets on eth0
• wireshark # GUI packet analyzer

🔹Step 10: Manual Networking and Connection Testing

• nc -lvp 4444 # Listen on port 4444 (server)
• nc 192.168.1.10 4444 # Connect to listener (client)
• netstat -an # Show all connections
• sudo netstat -tuln # Show listening ports
• ss -tuln # Show TCP/UDP listeners
• telnet <target-ip> 8080 # Test connection on port 8080
• traceroute google.com # Show path to destination
• nslookup google.com # DNS resolution

🔹Step 11: Network Interface and IP Info

• ip a # Show IP address info
• ifconfig # Show network interfaces
• ping google.com # Test internet connectivity
• route -n # Show routing table

🔹Step 12: Man-in-the-Middle and Sniffing 

• sudo ettercap -T -q -i eth0 -M arp:remote /192.168.1.10// /192.168.1.1//

🔹Step 13: IP Tables and Reset Configuration

• sudo iptables -F # Flush iptables rules
• sudo ufw reset # Reset ufw configuration

🔹Step 14: Open and Close Ports 

• Open a Port:
  Open Windows Defender Firewall with Advanced Security.
  Click Inbound Rules → New Rule.
• Select Port, click Next.
• Choose TCP or UDP, enter the port number (e.g., 8080), click Next.
• Allow the connection, apply to Domain/Private/Public, click Finish.
• 👉 Close a Port:
  Find the corresponding rule in Inbound Rules, right-click → Disable or Delete.

Safety Reminders

• Do not scan or ping unknown external IPs.
• Only use commands on your own system or the test VM.
• Always ask before testing on another device/network.