Beginning Ethical Hacking with Kali Linux: Computational Techniques for Resolving Security Issues \( PDFDrive.com \).epub by Unknown

Author:Unknown
Language: eng
Format: epub
Published: 2018-11-20T07:09:43+00:00

CHAPTER 8

Information Gathering

The information-gathering phase of penetration testing has one specific goal. It’s when a good penetration tester must learn as much about the client as possible. There are always many unanswered questions regarding the client. Their system must be running some software. What type of software are they using? They must comply with strict regulations regarding the usage of ports. Sometimes, the Internet-facing system listens to more ports than it should. Suppose a company is going to hire you to do some internal penetration tests. In such cases, you need to know the IP

address of the domain controller.

Information gathering (also called intelligence gathering or reconnaissance) is the first step of the kill chain when conducting a penetration test against a data target.

Note I have already discussed a few steps of information gathering in previous chapters, but this time you will see it in a more structured and detailed way, building on what you already know with plenty of examples.

Penetration testing starts with manual and automated testing. The next steps include network-focused testing, application-focused testing, and physical testing. The last part includes social engineering. This is more or less an overview of penetration testing.

© Sanjib Sinha 2018

189

S. Sinha, Beginning Ethical Hacking with Kali Linux,

https://doi.org/10.1007/978-1-4842-3891-2_8

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.