Before starting make sure your Kali & Butler machines are on the same network. Butler should be configured with DHCP. To find the IP address lets use arp-scan.
arp-scan -l Interface: eth0, type: EN10MB, MAC: 00:0c:29:b6:2b:dd, IPv4: 192.168.100.254 Starting arp-scan 1.10.0 with 256 hosts (https://github.com/royhills/arp-scan) 192.168.100.1 00:0c:29:49:c8:e6 VMware, Inc. 192.168.100.105 00:0c:29:ca:60:f2 VMware, Inc. 2 packets received by filter, 0 packets dropped by kernel Ending arp-scan 1.10.0: 256 hosts scanned in 2.295 seconds (111.55 hosts/sec). 2 responded
Findings:
- 192.168.100.105 is Butler’s IP address.
Enumeration:
Lets begin with an Nmap scan, this might take a while since we’re checking all ports. Alternatively, you can remove “-p-” and it should be much quicker, but I like to find as much information as possible during the first scan.