PENTESTING

PENTESTING

1. Information Gathering

   • Online Research
     • Web
       • Searches
         • Google
         • Metacrawler
         • Documents
       • Google Hacking
         • google
       • Automated
         • Maltego
         • Netcraft
     • Emails
       • Goog-mail
       • Google
   • Footprinting
     • DNS
       • Nislookup
       • Dig
       • Whois
     • Tracerouting
       • Troceroute
       • Tcptranceroute
       • Scapy
   • Important!
     • Passive reconaissance only
     • Catch all information possible, the more the batter
     • Prepare Wordlists, userlists
   • Results
     • IP Addresses, Network Ranges and Domainnames
     • Email Address
     • Ursenames

2. Network Enumeration

   • Nodes
     • Discovery
       • ICMP
         • Ping
         • Nmap
       • SNMP
         • Onesixtyone
         • Snmpwalk
       • NetBIOS
         • Nbtscan
         • Smb4k
       • DNS
         • Dnsenum
         • Host
         • Dig
         • AXFR!
     • Filter Detection
       • Afd
     • Scanning
       • Protocols
         • Nmap
       • Ports
         • Nmap
         • Unicomscan
         • Scanudp
     • Fingerprinting
       • Banners/ Service Versioning
         • Netcat
         • Openssl
         • Nmap
         • Amap
         • VPN
           • lke-scan
         • Oracle
           • Tnscmd
       • OS Versioning
         • Nmap
     • Vulnerability Scanning
       • Nessus
       • Openvas
       • NeXpose
       • Nmap NSE
   • Users
     • SMTP
       • VRFY!
     • NetBIOS
   • Important !
     • Non-Intrusive but active probing
     • Scan full port range and enumerate every open Port
     • Don't forget UDP, beside unreliability
   • Results
     • Supported Protocols
     • Open Ports TCP/UDP
     • Service and OS Versions
     • Usernames