Forum Thread: Map Network

WARNING you can get caught!

Anyways, please be more clear, do you have access to a machine in LAN? is it a Windows system or other OS? Do you have local admin rights on that machine?

Ya i have access to machineon LAN.Running win xp.Also i have admin rights.Cant i do it anynomously or by not getting caught?

With KALI - use ARMITAGE to scan, find vulnerabilities, and attack other systems. http://www.fastandeasyhacking.com/manual

If not, with windows you'll have very limited options, ut you can scan with nmap, and find more about the opent ports.

If someone decides to track you, and they really get into it, then chances are you will be tracked. because it not only depends on the system itself but other factors, like if there are security cameras installed, do they maintain a record of who uses the system etc.

Is it only you who have the admin account or other users have access to the system as well? I mean do you have the default administrator account or your account have administrator permissions?

Anyways, there are multiple ways you can go about it.

• if multiple users share the same admin account then just go ahead as anyone of them could have done it
• if your unique user account have admin access, just use http://pogostick.net/~pnh/ntpasswd/ to reset the local admin password, and log in as a local admin
• use some other machine on the network, which you don't have admin access to and reset its admin password, and use that for other things.

• BEST option - just check if boot from USB, or CD/DVD is enabled on any machine in you LAN, - if yes burn kali onto a usb/cd/dvd and boot it.

Then with KALI you can do all sorts of things!

Thanks...Got it.But how can i identify database server?And i have access to their cyberoam can oit help?

Do some social engineering to find out what database is in use, if you can. Otherwise use sqlmap in KALI to scan databases in network. It supports MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB database management systems.

This is where practice comes in, you just cant have set of instructions that tells you to do this and achieve what you want. So just try doing the above steps first, then use nmap to find devices, hopefully the machines will have hostnames like database.domain.org assigned to servers. check out https://null-byte.wonderhowto.com/how-to/hack-databases-hunting-for-microsofts-sql-server-0148993/ your school might have MS SQL installed, (most of them do).

They have Oracle.Thanks i will try it.