Hello, everyone, welcome back again with a new video on ethical hacking.
In previous videos, I have discussed all about what is hacking types of hackers and many more things.
Hackers are generally intelligent individuals with good computer skills and with the ability to create
and exploit the computer software and hardware.
Their intention could be either to gain knowledge or to dig around to do illegal things.
Attackers are motivated by a desire to know more, while malicious attackers would intend to steal data.
In general, there are five phases in which an intruder advances and attack.
Phase one, reconnaissance, phase two, scanning, phase three, gaining access, phase four, maintaining
access, and phase five, covering tracks.
Let's discuss first phase reconnaissance detail.
Reconnaissance also stands for information gathering, which means gathering any information about our
target, which involves network scanning, either internal or external, without authorization.
This is the phase that allows the potential attacker to strategize his or her attack in simple words
in this phase, which tries to gather information about our target.
So if our target is a Web site, then we can find an information about the IP address of that website.
The website is hosted on which server, what kind of frameworks are used in order to build that Web
site, etc..
Once we complete with the first phase, then we will directly jump into the second phase, which is
scanning in scanning phase.
We actually scan each and every component of the system or the website in order to find vulnerabilities.
So once we find the vulnerability, then the next step is to exploit that vulnerability, which means
in order to take access of that system or our website.
So once we found the vulnerability, then we will try to take the excess of the system by exploiting
that vulnerability.
So in the third phase, we are actually gaining access.
And once we are inside the system, once we are successfully exporting that system, then first step,
which one have to perform is we have to first make a backdoor.
But what is better?
Just what an example.
We are inside one system and somehow we lost access from that system.
Now what we can do, we are not able to get into the system back.
Do we really need to perform the whole process again?
No, I don't think so.
I mean, you can do that, but we are going to be a smart hacker.
So the first process is that once we are inside the system, we try to maintain our control on that
system.
So in order to maintain our access, we can generate our own vulnerabilities by changing some code of
the system so that we can come back into the system whenever we want in order to take access.
So this is what we can do in maintaining access fees.
So once we complete our fourth phase, which is maintaining the access, once we exploit the system,
then the last step is clearing tracks, which means clearing our records.
So what we can do is we can even lift the log files, we can clear the histories even we can change
their registry setting also.
So, guys, these are the five phases.
First one is reconnaissance in which we find the information.
Then the second one is scanning in which we scan the system and find the vulnerabilities.
Then the third is gaining access in which we try to exploit the system.
The fourth one is maintaining access in which we can make a backdoor so that we can come back into the
system in order to take access.
Then the last step is clearing tracks in which we have to clear our footprints.
So these are the five faces which one have to follow to perform a successful hack.
Thank you for watching this video by.