If you need to have a successful exercise of penetration testing you need to have a plan in place.
Now we're gonna talk about the phases of a successful penetration test and they're actually genetically
are five phases because on the Internet and on many different sources you can see that these faces can
be five or six more or less the first phase is called reconnaissance and scanning than exploitation.
Maintaining access and then reporting so on the first phase which is the reconnaissance actually the
attacker tries to gain information about the target.
This approach can be active or passive.
The attacker tries to have a blueprint of the security profile of their target whether it's an organization
person etc. So it involves gathering information about the network that we're attacking and attempt
to create the profile of the organizations networks systems and applications.
Some of the most common tools used in the reconnaissance phase are the who is utility or Smart who is
and the NSA.
Look you can as well use open information which is available on the Internet such as the contact names
of the company available phone numbers email addresses locations and branches.
Even the partners that the company has relation or deals with you can as well check the news about some
mergers acquisitions.
The website of the company is very important.
Some links on this Web site which might take you to the company's policies and procedures so it's utilizing
the open source data available.
The second phase is scanning and here.
Our goal is to discover the open ports the available access points the operating systems that are used
and to uncover the services available to us.
The second phase is the scanning phase and our goal here is to discover the open ports access points
braking systems and uncover services running on these ports.
Our goal is to perform some external and internal scanning buying machines to the German network ranges
and to come up with a profile of the individual systems.
Some of the common tools used as well are being traced ro super scan net cat and map of course and others
enumerating is an important aspect of this phase.
The goal of intimidation is to paint a fairly complete picture of the target.
So to intimidate a target it does so tries to identify valid user accounts or poorly protected resource
shared some using directed ways or active connections from the target.
The type of information sought by testers during the enumeration phase can be user names groups so much
talk resources and shares and applications.
Some of the tools used in this phase or sub phase as we're talking about enumeration are active directory
lookups to uncover any vulnerabilities and users and groups discovering the net based name with NBC
scan.
We will see this in the upcoming videos using S&P utilized for the S&P and employing windows DNS queries
along with establishing some nail sessions and connections.
The next phase is exploitation here.
The actual penetration takes place.
I didn't enlist the tools because they are all the tools available on Calleigh Linux.
As we saw before in the videos maintaining access is to make sure that we still access the target.
The last phase is reporting which is the most dreaded point.
It usually contains an executive overview and technical summary but we need to get used to documenting
our work and findings.
It's the only professional way to get the job done.