Posts

Showing posts with the label Pen-tesing

Pen Testing and It's Phases

Image
Cybersecurity audit and its type 1) Security Audit 2) Vulnerability Assessment 3) Penetration test Let us understand above all terms  in the below section So first is 1) Security Audit: Security audit is a manual or systematic assessment of any vulnerable system. It includes Check all the configuration of the system and a network Interview all the staff of the organization in which we are penetrating. Review all the policies of the organization Check if the operating system they are using and software they are using that are not outdated or they need any updation. To get the best result we have to perform a security audit with admin privileges. 2) Vulnerability Assessment Vulnerability assessment means to identify the vulnerability and the classifying then into a security loophole group. An attacker can use the vulnerability to misuse the system by exploiting them and violate the security of the system. Vulnerability means weakness of the system, or we can say a loophole in a syst...

INFORMATION GATHERING WITH RECON-NG Part-1

Image
INFORMATION GATHERING WITH RECON-NG Part-1 Recon-ng is a Web Reconnaissance tool written in Python for information gathering, which helps you to retrieve or gather various information from a domain or a company name like, you can gather detail information about contacts from particular website or company as well as information such as what are the subdomains, which are linked with any particular URL. This framework is built with several ‘module’ classes which enable users to reconnaissance easily and retrieve information by using command code in the terminal. Recon-ng tool also gives the functionality of generating report, regarding whatever things you have gathered. Recon-ng can generate reports in various formats such as html, csv and json etc. 1. Installation of Recon-ng You can simply run recon-ng command in terminal to start recon-ng.   If recon-ng is not installed in your computer then you can install it by using command apt-get update && apt-get ins...