Why is banner grabbing an effective technique to employ

Reference no: EM133693501

FICBANK Infrastructure - Penetration Testing Plan & Report

3. Penetration Testing Methodologies
3.1. Phase 1: Reconnaissance and Enumeration
1.1.1. Publicly Available Information
1.1.2. Service Banner and Fingerprinting Information
1.1.3. Live Hosts
1.1.4. Traceroute
1.1.5. Nmap
1.2. Phase 2: Vulnerability Discovery
1.2.1. Live Hosts
1.2.2. Open Ports and Services
1.2.3. Nikto
1.2.4. Nessus

Task 1: Gather Publicly Available Information
Web search for Damn Vulnerable Web App instance.
Task 2: Perform Service Banner Grabbing
Using the "nc" (Netcat) command followed by the IP address and port number to connect to services running on the Damn Vulnerable Linux instance
Task 3: Fingerprint Service Versions Through Telnet
Using the "telnet" command followed by the IP address and port number to connect to a service running on the Damn Vulnerable Web App instance.

Active Reconnaissance
Task 1: Scan for Live Hosts with Ping Sweep
Using the "ping" command followed by the network range to perform a ping sweep and identify live hosts: ping -b10.13.246.8

Task 2: Use Traceroute to Map Network Paths
Using the traceroute command to perform a traceroute to the Damn Vulnerable Web App instance: traceroute 10.13.246.8

Task 3: Enumerate Hosts Using Nmap
Using Nmap to perform a service version detection scan on the Damn Vulnerable Linux instance: nmap -sn10.13.246.0/24

REFLECTION QUESTIONS:
1. Now that you have initiated a penetration test, what do you think are 3-5 goals of penetration testing?

2. How might publicly accessible information gathered during reconnaissance and enumeration further some or all of those goals?

3. What are some differences between active and passive reconnaissance and enumeration?

1. Why is banner grabbing an effective technique to employ?

2. What difference(s) did you observe between the active reconnaissance using ping -b and nmap -sn? What technical explanation is there for your observation?

Reference no: EM133693501

Questions Cloud

Which airports were the busiest : Limit map clutter by leveraging tooltips and removing unnecessary map layers. Add a filter to the view to help show which airports were the busiest in 2021.

Relationship between faith in god and science : Why understanding the difference between primary and secondary causality helps to make sense of the relationship between faith in God and science.

What is significance of distinction of monism and dualism : What is the significance of the distinction of monism and dualism when it comes to Hindu religious practices, such as the various forms of Bhakti?

How many total unique combinations are possible in the model : A marketer is building a conjoint analysis model with 5 features. How many total unique combinations are possible in this model?

Why is banner grabbing an effective technique to employ : How might publicly accessible information gathered during reconnaissance and enumeration further some or all of those goals?

Which charts are similar in that they show comparisons : Using your textbook and your completed Bproject, answer the following questions. Which charts are similar in that they both show comparisons among relateddata?

How are notions of masculinity challenged : How are notions of masculinity challenged? How do you navigate masculinity? How do you see the role of healing and gender being important in prisons?

What customer is asking for and search existing knowledge : What the customer is asking for and search existing knowledge base or the backend system to answer the questions.

Which causes the client to make the first get request : Which causes the client to make the first GET request to when the base page and the jpeg file are displayed?

Reviews

len3693501

5/14/2024 3:43:34 AM

Project 3 is what I want to do now It's not, it's just project 3. Which is the same as the other two. Only difference is the instructions are all over the place. After it's done , the final work should be sent to me. I ll arrange it and send it to the tutor. Just project 3

Write a Review

Required(*) Message

User Account

All Pages