Karteikarten
Security+ Penetration Testing Steps and Life Cycle
Karten in diesem Stapel (10)
- 1Pen Test Step 1Verify a threat exists
done through research, social engineering, scanning, vuln assess tools, or OSINT - 2Pen Test Step 2Bypass security controls
test all weaknesses previously discovered - 3Pen Test Step 3Actively testing security controls
check for config vulnerabilities such as weak passwords - 4Pen Test Step 4Exploit vulnerabilities
prove the vuln exists and the risk is high - 5Pen Test Life Cycle #1Persistence
the ability to reconnect to a compromised system at will - 6Pen Test Life Cycle #2Privilege Escalation
horizontal or vertical - 7Pen Test Life Cycle #3Lateral Movement
gaining control over endpoints and devices not initially exploited - 8Pen Test Life Cycle #4Pivoting
gaining access to another device using remote access or tunneling protocols - 9Pen Test Life Cycle #5Actions on Objectives
the pen tester is showing that it's possible to exfiltrate data, deface a website, or more - 10Pen Test Life Cycle #6Cleanup
remove any backdoors, tools, software, files, etc that was used for the pen test
Informationen
- Beschreibung
- CompTIA Information Technology (Security+ ) Karteikarten am Security+ Penetration Testing Steps and Life Cycle, erstellt von Lyndsay Badding am 26/04/2023.
- Erstellt von
- Lyndsay Badding
- Aufrufe
- 18
- Tags
- Bewertung