OUTPUTS A list of hosts, servers, and other network hardware on LAN The operating systems and services on each host. Services used by the host as identified by decrypted wireless network traffic. Possible vulnerable services and practices.40 OPERATIONAL SECURITY Clarify timing and seek permission with staff - some activities can tax the network or cause disruptions. Confirm that all devices you are accessing/scanning belong to the organization. Delete all devices from your scan that do not belong to the organization. Study outputs for any obviously embarrassing personal information (especially traffic sniffing or personal devices connected to the network) before sharing. Treat captured network traffic with the utmost security and empathetic responsibility. They may contain very personal data, passwords, and more. These should not be shared except in specific, intentional samples with anyone, including the organization itself. PREPARATION Baseline Skills Skill with using nmap/zenmap and its scripting options Skill with Wireshark or other packet-capturing tool, as well as possibly more advanced traffic interception tools. RESOURCES Guide: "10 Techniques for Blindly Mapping Internal Networks" Resource List: Wireless Access Guides & Resources (SAFETAG) Resource List: nmap Scanning Resources (SAFETAG) Resource List: System Vulnerability Scanning Resources (SAFETAG) Network Mapping Methods Guide: "10 Techniques for Blindly Mapping Internal Networks" Directory: "Network Forensics Packages and Appliances" (Forensics Wiki) Directory: "Scripts and tools related to Wireshark" (Wireshark Wiki) Nmap Scanning Guide: "The Official Nmap Project Guide to Network Discovery and Security Page 55 of 240