- Mastering Kali Linux for Advanced Penetration Testing
- Robert W. Beggs
- 214字
- 2021-07-16 11:33:22
Chapter 3. Active Reconnaissance and Vulnerability Scanning
The objective of the reconnaissance phase is to gather as much information about the target as possible in order to facilitate the exploitation phase of the kill chain.
We have seen how passive reconnaissance, which is almost undetectable, can yield a significant amount of information about the target organization and its users.
Active reconnaissance builds on the results of open-source intelligence and passive reconnaissance, and focuses on using probes to identify the path to the target and the exposed attack surface of the target. In general, complex systems have a greater attack surface, and each surface may be exploited and then leveraged to support additional attacks.
Although active reconnaissance produces more information, and more useful information, interactions with the target system may be logged, triggering alarms by protective devices, such as firewalls and intrusion detection systems. As the usefulness of the data to the attacker increases, so does the risk of detection; this is shown in the following diagram:

To improve the effectiveness of active reconnaissance in providing detailed information, our focus will be on using stealthy, or difficult to detect, techniques.
In this chapter, you will learn:
- Stealth scanning strategies
- Network infrastructure, host discovery, and enumeration
- Comprehensive reconnaissance applications, especially
recon-ng
- Targeted vulnerability scanning
- 攻守道:企業(yè)數(shù)字業(yè)務(wù)安全風(fēng)險(xiǎn)與防范
- Learning Python for Forensics
- 特種木馬防御與檢測技術(shù)研究
- .NET安全攻防指南(上冊)
- 代碼審計(jì):企業(yè)級Web代碼安全架構(gòu)
- Kali Linux Wireless Penetration Testing Cookbook
- Spring Security(Third Edition)
- 信息安全案例教程:技術(shù)與應(yīng)用(第2版)
- 華為防火墻實(shí)戰(zhàn)指南
- Hands-On Artificial Intelligence for Cybersecurity
- 數(shù)字銀行安全體系構(gòu)建
- Real-World SRE
- 大數(shù)據(jù)時(shí)代的云安全
- 反黑風(fēng)暴:黑客社會(huì)工程學(xué)攻防演練
- 大話數(shù)據(jù)恢復(fù)