官术网_书友最值得收藏!

Chapter 3. Active Reconnaissance and Vulnerability Scanning

The objective of the reconnaissance phase is to gather as much information about the target as possible in order to facilitate the exploitation phase of the kill chain.

We have seen how passive reconnaissance, which is almost undetectable, can yield a significant amount of information about the target organization and its users.

Active reconnaissance builds on the results of open-source intelligence and passive reconnaissance, and focuses on using probes to identify the path to the target and the exposed attack surface of the target. In general, complex systems have a greater attack surface, and each surface may be exploited and then leveraged to support additional attacks.

Although active reconnaissance produces more information, and more useful information, interactions with the target system may be logged, triggering alarms by protective devices, such as firewalls and intrusion detection systems. As the usefulness of the data to the attacker increases, so does the risk of detection; this is shown in the following diagram:

Active Reconnaissance and Vulnerability Scanning

To improve the effectiveness of active reconnaissance in providing detailed information, our focus will be on using stealthy, or difficult to detect, techniques.

In this chapter, you will learn:

  • Stealth scanning strategies
  • Network infrastructure, host discovery, and enumeration
  • Comprehensive reconnaissance applications, especially recon-ng
  • Targeted vulnerability scanning
主站蜘蛛池模板: 元谋县| 大庆市| 辰溪县| 贵德县| 张家口市| 阳原县| 余庆县| 玉山县| 霍城县| 韩城市| 故城县| 东乡县| 张家口市| 苏尼特右旗| 南昌市| 伊吾县| 黔江区| 余姚市| 抚州市| 兴宁市| 通海县| 亚东县| 威宁| 博兴县| 伊吾县| 体育| 山西省| 瓦房店市| 郴州市| 德昌县| 舟曲县| 石景山区| 沁源县| 扎赉特旗| 四平市| 新昌县| 丁青县| 金沙县| 含山县| 四子王旗| 抚宁县|