Fichas
Security+ Penetration Testing Steps and Life Cycle
Fichas del conjunto (10)
- 1Pen Test Step 1Verify a threat exists
done through research, social engineering, scanning, vuln assess tools, or OSINT - 2Pen Test Step 2Bypass security controls
test all weaknesses previously discovered - 3Pen Test Step 3Actively testing security controls
check for config vulnerabilities such as weak passwords - 4Pen Test Step 4Exploit vulnerabilities
prove the vuln exists and the risk is high - 5Pen Test Life Cycle #1Persistence
the ability to reconnect to a compromised system at will - 6Pen Test Life Cycle #2Privilege Escalation
horizontal or vertical - 7Pen Test Life Cycle #3Lateral Movement
gaining control over endpoints and devices not initially exploited - 8Pen Test Life Cycle #4Pivoting
gaining access to another device using remote access or tunneling protocols - 9Pen Test Life Cycle #5Actions on Objectives
the pen tester is showing that it's possible to exfiltrate data, deface a website, or more - 10Pen Test Life Cycle #6Cleanup
remove any backdoors, tools, software, files, etc that was used for the pen test
Información
- Descripción
- CompTIA (Security+ ) Information Technology Fichas sobre Security+ Penetration Testing Steps and Life Cycle, creado por Lyndsay Badding el 26/04/2023.
- Creado por
- Lyndsay Badding
- Visitas
- 18
- Etiquetas
- Valoración