This interactive lab teaches essential skills to secure a network and detect vulnerabilities using real-world tools.

In this lab, you will learn to:

• Scan for open ports and services using Nmap.
• Configure firewall rules to block malicious traffic.
• Analyze network traffic using Wireshark to detect vulnerabilities and threats.
• Implement strategies to defend against attacks like port scanning and DDoS.

Disclaimer: This lab is intended for educational purposes only. Unauthorized use of these techniques on networks you do not own is illegal.

1. Network Scanning: Type nmap -sP 192.168.1.0/24 to scan the local network for live hosts.
2. Port Scanning: Use nmap -sT [IP] to scan open ports on a target host.
3. Service Detection: Run nmap -sV [IP] to detect services running on the open ports.
4. Firewall Configuration: Create a rule to block incoming connections on port 80 with iptables -A INPUT -p tcp --dport 80 -j DROP.
5. Packet Sniffing: Use wireshark to start capturing network traffic.
6. Security Countermeasures: Implement strategies to block port scans and DDoS attacks.

Complete the short exercises below. Correct answers unlock progress and badges.

To protect your network from common attacks, consider implementing the following security measures:

• Use a Strong Firewall: Configure your firewall to block unauthorized traffic and limit access to sensitive services.
• Use Encryption: Encrypt sensitive data both in transit and at rest using standards like TLS/SSL for communication and AES for storage.
• Use Intrusion Detection Systems (IDS): Monitor network traffic for abnormal patterns indicative of malicious activity.
• Limit Open Ports: Only open the ports necessary for your network operations and close all others.
• Implement Network Segmentation: Segment your network to isolate critical systems and limit the damage from breaches.
• Regularly Update Systems: Keep all systems, routers, and firewalls up-to-date to patch known vulnerabilities.
• Use DDoS Protection: Implement measures to prevent or mitigate Distributed Denial of Service (DDoS) attacks.

---

Quick Network Security Quiz

1. Which tool is best for scanning open ports?
Netcat
Nmap

2. What is a common method for blocking malicious traffic?
Allow all inbound traffic
Use a firewall to block malicious IPs

Submit Answers