Karteikarten
Module 2: Recon
Karten in diesem Stapel (12)
- 1Identify Pentesting Cycle and PhasesReconnaisance -> Scanning -> Exploitation -> Post Exploitation -> (Report Writing)
- 2Describe Reconnaisance-Information gathering
-Collecting publicly available information - 3Identify common google-fu techniques-Using quotes " "
-site: , for specific sites
-filetype: , find specific filetypes
-intitle: , find in title
-inurl: , find in url
-intext: , find in body - 4How to defend against Google hacking?-Configure web servers appropriately
-Sanitize web files to remove sensitive information - 5Describe whoisA service to find information on domain names and IP addresses. Finds the registrar (provider) and registrant(domain owner)
- 6Describe the DNS server hierarchyRoot DNS Servers
|
Top Level Domain DNS Servers
|
Authoritative DNS servers
_______
Local name server - 7Describe Root DNS Servers-Know IP Addresses of TLD Name servers and pass queries to them
- 8Describe TLD DNS Servers-Responsible for com, org, net, edu etc and all country domains like .au .uk. fr etc
- 9Describe authoritative dns serversProvides mapping of hostname to IP address in an organisation.
- 10Describe local name servers-Are outside the DNS hierarchy
-Managed by residential ISP, uni, company etc
-The first step in process when a host makes a dns query
-Has a cache of recent name to address mappings. (RR) Resource Records. - 11Resource Record TypesA=ipv4 address record
AAAA=ipv6 address record
SOA=Primary name server for a named domain
MX=Mail exchange record
CNAME=Canonical name of an address
PTR=Finds hostname of an ip address
NS=Hostname of authoritative name server for a domain - 12Describe a Zone TransferA method for replicating DNS records across a set of DNS servers. Possible using nslookup and dig
Informationen
- Beschreibung
- First Year Cyber Security Karteikarten am Module 2: Recon, erstellt von Samuel Collado am 17/06/2023.
- Erstellt von
- Samuel Collado
- Aufrufe
- 0
- Bewertung