Book Image

Reconnaissance for Ethical Hackers

By : Glen D. Singh
5 (1)
Book Image

Reconnaissance for Ethical Hackers

5 (1)
By: Glen D. Singh

Overview of this book

This book explores reconnaissance techniques – the first step in discovering security vulnerabilities and exposed network infrastructure. It aids ethical hackers in understanding adversaries’ methods of identifying and mapping attack surfaces, such as network entry points, which enables them to exploit the target and steal confidential information. Reconnaissance for Ethical Hackers helps you get a comprehensive understanding of how threat actors are able to successfully leverage the information collected during the reconnaissance phase to scan and enumerate the network, collect information, and pose various security threats. This book helps you stay one step ahead in knowing how adversaries use tactics, techniques, and procedures (TTPs) to successfully gain information about their targets, while you develop a solid foundation on information gathering strategies as a cybersecurity professional. The concluding chapters will assist you in developing the skills and techniques used by real adversaries to identify vulnerable points of entry into an organization and mitigate reconnaissance-based attacks. By the end of this book, you’ll have gained a solid understanding of reconnaissance, as well as learned how to secure yourself and your organization without causing significant disruption.
Table of Contents (15 chapters)
Part 1: Reconnaissance and Footprinting
Part 2: Scanning and Enumeration

Active reconnaissance

Unlike passive reconnaissance, which leverages OSINT to help ethical hackers create a profile of a target, active reconnaissance uses a more direct approach by sending probes to the targeted systems and networks to collect sensitive and specific details. For instance, during passive reconnaissance, the threat actor depends on the accuracy of the collected data from multiple online sources. If the data is outdated or inaccurate, it can affect both the weaponization and exploitation phases and prevent ethical hacking from gaining access to the target. With active reconnaissance, the collection of data is performed in real time, enabling ethical hacking to collect and analyze current data to help improve future operations.

Important note

Scanning is intrusive and illegal in many countries, so ensure that you obtain legal permission from the authorities before scanning any system or network you do not own.

Active reconnaissance plays an important role during...