Hello Readers,This is Static-Oblivion

Today is the first of many articles to come what were focusing on today is ethical hacking for i.e Pen Testers I just want to start off with the basic disclaimer:I'm not responsible or liable for the use or misuse of the information about to be givin.....in anyway!

OK!Now that we have that out of the way let's begin.

-------------------------------------
Essential terms used by Pen Testers.|
-------------------------------------
Threat:Any action and or event taht might compromise security.

Exploit:A defined way to breach the security of a IT system trough vulnerabilty.

Vulnerability:Existence of a weakness,desighn,or implementation error that can lead to an unexpected,undesirable event compromising the security of the system.

Target of Evaluation:An IT system,product,or component that is idetified needing security evaluation.

Attack:a assault on given system
security that comes from a itelligent threat i.e you

---------------------------------
What does a attacker do exactly?|
---------------------------------

Now what does a attacker do ecactly?When I say this I mean the proper way a pro does things to secure himself and the system as quickly as possible without legal ramifications this may not be the way evrybody does things but this is a basic out line of how it "should" be done.

1.Reconnaissance
-Active/Passive

2.Scanning

3.Gaining Access
-Operating system level/application level
-Network level
-Denial of service

4.Maintaining access
-Uploading/altering/downloading programs or data

5.Clearing tracks
----------------------------------------------------------------

--------------
Phase 1 Recon|
--------------

Passive recon
-------------
Involves acquiring info without directly interacting with the target.(Fr example,searching public releases.records,or news releases.Theres more but I'll leave up to your judgement)

Active Recon
------------
Involves Interacting with the target by anymeans.(For example,Telephone calls to the help desk or technical department)

------------------------------------------------------------------

-----------------
Phase 2 Scanning|
-----------------

-Scanning refers to the pre attack phase when the hacker scans the network for specific information on the basis of info gathered during recon.

-scanning can include use of dialers,port scanners,network mapping,sweeping,vulnerability scanners,and so on.

------------------------------------------------------------------

-----------------------
phase 3 gaining access|
-----------------------

-Gaining access refers to the penetration phase.The hacker exploits the vulnerability in the system.

-The exploit can occur over LAN,the internet,or as a deception or theft.(Examples include buffer overflows,denial of service,session hijacking and password cracking)

-Ifluencing factors include architecture and conifiguration of the target system,the skill level of the hacker,and the initial level of access obtained.

------------------------------------------------------------------

-------------------------
phase 4 maintainig Acess|
-------------------------

-Maintaing Access refers to the phase whn the hacker tries to retain his ownership of the system.

-The hacker has compromised the system.

-Hackers may harden the system from other hackers as well(to own the system)by securing thier exclusive access with backdoors,Rootkits,or Trojans(R) j/k :)

-Hackers can upload,download,or manipulate data,applications,and configurations on the "Owned" system.

------------------------------------------------------------------

----------------------------
Phase 5 covering you tracks|
----------------------------

-Covering Tracks refers to the activities that the hacker undertakes to hide his actions.

-Reasons include the need for prlonged stay,continued use of resources,removing evidence of hacking,or avoiding legal action.

-Examples include Stenography,Tunneling,and altering log files.

------------------------------------------------------------------

------------------------
Types of hacker attacks|
------------------------

-There are several ways a attacker can gain acces to a system.

-The attacker must be able to exploit a weakness or vulnerability in a system

Attack types:
1.Operating System attacks.
2.Application-level attacks.
3.Shrink wrap code attacks.
4.Misconfiguration attacks.
------------------------------------------------------------------

-----------
Side note.|
-----------

Now as much as I want to go into explanation of the techniques I think it would be better if you googled them and read up on them yourself after all I'm not here to spoon feed. :)

However In the next articles I will explain the 5 steps in depth along with some tool recomendations used by the pros!So were even ok?

So thats all for now more to come probably about evry other day Stay tuned for the next article.

Titled:Footprinting

Peace,

Static-Out