atomic-red-team/Mac/Discovery/Remote_System_Discovery.md

Remote System Discovery

MITRE ATT&CK Technique: T1018

arp

Input:

arp -a | grep -v '^?'

Network scanning

Input:

for ip in $(seq 1 254); do ping -c 1 192.168.1.$ip -o; [ $? -eq 0 ] && echo "192.168.1.$ip UP" || : ; done