You have t include screenshots if possible and classify threats on the basis of severity.īasics to Advanced Attacks= SQL + XSS + DoS & DDoS You have to include what tools or techniques you have used during pen-testing and what results you got. Generating Reports: Reports are a summary of your work deliver to management. The longer a Hacker is able to maintain access the more information He may able to gather.Ĭlearing Tracks: No thief wants to get caught, Prior to the attack, the attacker would change their MAC address and run the attacking machine through at least one VPN to help cover their identity, So no one can reach them. Once the hacker owns the system, they can use it as a base to launch additional attacks. Maintaining Access: Once a hacker has gained access, they want to keep that access for future exploitation and attacks. The hacker has finished enumerating and scanning the network and now decide that they have some options to gain access to the network. Gaining Access: In this phase, hacker designs the blueprint of the network of the target with the help of data collected during Phase 1 and Phase 2. Port scanners can be used to detect listening ports to find information about the nature of services running on the target machine. Attackers can gather critical network information such as the mapping of systems, routers, and firewalls with simple tools like Traceroute. Scanning: It can be considered a logical extension of active reconnaissance since the attacker uses details gathered during reconnaissance to identify specific vulnerabilities. This information is very useful to a hacker who is trying to crack a whole system.

To get this information, a hacker might use various tools and technologies. Footprinting > Scanning > Gaining Access > Maintaining Access > Clearing Tracks > Generating Reportsįootprinting: It is a technique used for gathering information about computer systems and the entities they belong to.

Mobile hacking sites