Hi, everyone.
Welcome to this news section.
In this section, we are going to learn how to gather information about the target using some tools
and Web sites.
So Recognizer's is the name of this whole process.
So over the years, malicious attackers have found various ways to penetrate into a system.
They gather information about the target, identify vulnerabilities and then unleash an attack.
So once inside the target, they try to hide their tracks and remain hidden for a long time that how
can we not necessarily follow the same sequence, but as a penetration test following the suggested
approach will help you to conduct the assessment in a structured way.
And the data collected at each stage help in preparing a report that is available of your clanked.
An attacker is aim is to just to ultimately own the system so they might not follow any sequential methodology
as a basis to your aims to identify as many as you can.
And following a methodology is really useful.
So however, you also need to be creative and think out of the box.
So what we can see that there are some different up.
There are some different stages of changes and testing.
Like first one is reconnaissance that is scanning, then exploitation, then maintaining access and
covering the tracks.
So reconnaissance and scanning are the initial stage of penetration testing and the success of penetration
test depends on the quality of information gathering during these fees.
So in this section, we will simply learn or work as a banquet's intestine, extract information using
both we can see website based and tool based reconnaissance.
So first of all, before going into it, let's understand what is reconnaissance?
Reconnaissance is a tool and a technique used by different forces to obtain information about the enemy
in a way that does not allow the other side.
And the same method is applied by the malicious user to obtain information related to the target.
So information gathering is the main aim of reconnaissance and information gathered at the initialised.
It is to be considered as very important.
The attacker working with the malicious content based bill simply information learned during the reconnaissance
date and gradually moves ahead with the exploitation.
And a small bit of information that looks very ugly may help you in highlighting a social flaw in the
later stage of the test.
A good point isn't Tester is the one who knows how to identify low scoring abilities that have a potential
of causing a huge damage under some conditions, so an attacker would be eyeing a single ability to
exploit.
And your target?
To me, the system has proven by identifying even the smallest vulnerability that an attacker can exploit
to gain access.
So what the aim of reconnaissance, the aims of reconnaissance is like identifying the IP address subdomains
and relayed information using who is record search engines and dinosaurs.
And the second thing is simply accumulating the information about the target Web site from publicly
available resources such as Google being Yahoo!
And on and identifying people related to the largest with the help of social networking sites like Google,
Flickr, Instagram, Twitter and tools such as Maitake.
With the help of that and determining the physical location of the target using QIP database, satellite
images from Google Map and Bing Maps.
So these all are the terms.
These all are the things that will be going to gather information about in this particular section.
So without wasting time, let's begin with our information gathering section.