Madhnw0rm.com - Information About Cyber Security Awareness: Penetration Testing

<div dir="ltr" style="text-align: left;" trbidi="on">
Madhw0rm Short Bytes:- Penetration testing (also called pen testing) is a tool for testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.  
 
Penetration testing is a method of evaluating the security of an information system or network by simulating an attack to find out vulnerabilities that an attacker could exploit. 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLv2B9nVlaSibdhX7MCmMBCdaqa8aRapJHC1Hdk6ibt-aMSi3tu4nBANUYUMOC9E3D6H92zSucDyilZoYJwqLixOMBIB3GAn_l47WwCWBS6az-f9JlVM4s39aXTZMZ3jdOJG-uqpwQkkp0/s1600/penetration+testing+madhnw0rm.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="143" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLv2B9nVlaSibdhX7MCmMBCdaqa8aRapJHC1Hdk6ibt-aMSi3tu4nBANUYUMOC9E3D6H92zSucDyilZoYJwqLixOMBIB3GAn_l47WwCWBS6az-f9JlVM4s39aXTZMZ3jdOJG-uqpwQkkp0/s400/penetration+testing+madhnw0rm.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
Testing involves active analysis of system configurations,design weakness,network architecture,techincal flaws,and vulnerabilities 
 
Blackbox testing simulates an attack from someone who has no prior knowledge  of the system,and white box testing simulates an attack from someone who has complete knowledge about the system. 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifxc-PW62QG8PLpOy6AkFz7pBklbf1ZLWJdSPfRvePMzCdz0TupvfnuAzGC4RlGyZ_XF4A94EZprF5iY7edI0tUQiJ5Dp65SAc1PQ_qMXfrUIWvda4kiI8nSvqyD_zQjJrhdjnUYJmaTfn/s1600/Pentester.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="254" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifxc-PW62QG8PLpOy6AkFz7pBklbf1ZLWJdSPfRvePMzCdz0TupvfnuAzGC4RlGyZ_XF4A94EZprF5iY7edI0tUQiJ5Dp65SAc1PQ_qMXfrUIWvda4kiI8nSvqyD_zQjJrhdjnUYJmaTfn/s320/Pentester.JPG" width="320" /></a></div>
 
 
A comprehensive report with details of vulnerabilities discovered and suite of recommended countermeasures is delivered to the executive, management,and technical audiences. 
<h2 class="definition-subtitle" style="font-weight: 400; line-height: 1.54em; margin: 0px 0px 20px 240px; min-height: 125px; width: 540px;">
</h2>
</div>

What is Penetration testing?

Madhw0rm Short Bytes:- Penetration testing (also called pen testing) is a tool for testing a computer system, network or Web application t...

<div dir="ltr" style="text-align: left;" trbidi="on">
<a href="https://www.slideshare.net/madhannz/summarizing-the-five-phases-of-penetration-testing" target="_blank" title="Summarizing the five phases of penetration testing">Summarizing the five phases of penetration testing</a> from <a href="https://www.slideshare.net/madhannz" target="_blank">Madhn Rj</a> 
 
<ol class="j-transcripts transcripts no-bullet no-style" itemprop="text" style="box-sizing: inherit; line-height: 1.6; list-style: none; margin: 0px 0px 1.42857rem 1.4rem; padding: 0px;">
<li style="box-sizing: inherit; margin: 0px; padding: 0px;">1. Summarizing The Five Phases of Penetration Testing</li>
<li style="box-sizing: inherit; margin: 0px; padding: 0px;"><a href="http://image.slidesharecdn.com/summarizingthefivephasesofpenetrationtesting-150815135728-lva1-app6891/95/summarizing-the-five-phases-of-penetration-testing-2-638.jpg?cb=1439647257" style="box-sizing: inherit; cursor: pointer; line-height: inherit; text-decoration: none;" target="_blank" title="Phase 1 | Reconnaissance
Reconnaissance is the act of gathe...">2. </a>Phase 1 | Reconnaissance Reconnaissance is the act of gathering preliminary data or intelligence on your target. The data is gathered in order to better plan for your attack. Reconnaissance can be performed actively (meaning that you are directly touching the target) or passively (meaning that your recon is being performed through an intermediary).</li>
<li style="box-sizing: inherit; margin: 0px; padding: 0px;"><a href="http://image.slidesharecdn.com/summarizingthefivephasesofpenetrationtesting-150815135728-lva1-app6891/95/summarizing-the-five-phases-of-penetration-testing-3-638.jpg?cb=1439647257" style="box-sizing: inherit; cursor: pointer; line-height: inherit; text-decoration: none;" target="_blank" title="Phase 2 | Scanning
The phase of scanning requires the appli...">3. </a>Phase 2 | Scanning The phase of scanning requires the application of technical tools to gather further intelligence on your target, but in this case, the intel being sought is more commonly about the systems that they have in place. A good example would be the use of a vulnerability scanner on a target network.</li>
<li style="box-sizing: inherit; margin: 0px; padding: 0px;"> </li>
</ol>
<iframe allowfullscreen="" frameborder="0" height="485" marginheight="0" marginwidth="0" scrolling="no" src="//www.slideshare.net/slideshow/embed_code/key/Kgms6Uxl3dS5b2" style="border-width: 1px; border: 1px solid #CCC; margin-bottom: 5px; max-width: 100%;" width="595"> </iframe> 
 
 
<table cellpadding="0" cellspacing="0" class="tr-caption-container" style="float: left; margin-right: 1em; text-align: left;"><tbody>
<tr><td style="text-align: center;"><a href="http://www.madhnw0rm.com/" target="_blank"><img alt="Penetration Testing Redefined" border="0" height="296" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqtDv39QCLNsqTUmRoDjPgKVtTDekUSDFaYFRiKqNq7RITYL0nMUh8brY10Gwr0CcCVQPVck0uNGUg5yedZW6I1-b12qTJwDBqyUT68itysfsaACQ7kz3lto43WA1AerQZkxv5Eq2TBzs8/s400/Penetration+Testing.JPG" title="Penetration Testing" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><a href="http://www.madhnw0rm.com/" target="_blank"> </a></td></tr>
</tbody></table>
<ol class="j-transcripts transcripts no-bullet no-style" itemprop="text" style="box-sizing: inherit; line-height: 1.6; list-style: none; margin: 0px 0px 1.42857rem 1.4rem; padding: 0px;">
<li style="box-sizing: inherit; margin: 0px; padding: 0px;"><a href="http://image.slidesharecdn.com/summarizingthefivephasesofpenetrationtesting-150815135728-lva1-app6891/95/summarizing-the-five-phases-of-penetration-testing-4-638.jpg?cb=1439647257" style="box-sizing: inherit; cursor: pointer; line-height: inherit; text-decoration: none;" target="_blank" title="Phase 3 | Gaining Access
Phase 3 gaining access requires ta...">4. </a>Phase 3 | Gaining Access Phase 3 gaining access requires taking control of one or more network devices in order to either extract data from the target, or to use that device to then launch attacks on other targets.</li>
<li style="box-sizing: inherit; margin: 0px; padding: 0px;"><a href="http://image.slidesharecdn.com/summarizingthefivephasesofpenetrationtesting-150815135728-lva1-app6891/95/summarizing-the-five-phases-of-penetration-testing-5-638.jpg?cb=1439647257" style="box-sizing: inherit; cursor: pointer; line-height: inherit; text-decoration: none;" target="_blank" title="Phase 4 | Maintaining Access
Maintaining access requires ta...">5. </a>Phase 4 | Maintaining Access Maintaining access requires taking the steps involved in being able to be persistently within the target environment in order to gather as much data as possible. The attacker must remain stealthy in this phase, so as to not get caught while using the host environment.</li>
<li style="box-sizing: inherit; margin: 0px; padding: 0px;"><a href="http://image.slidesharecdn.com/summarizingthefivephasesofpenetrationtesting-150815135728-lva1-app6891/95/summarizing-the-five-phases-of-penetration-testing-6-638.jpg?cb=1439647257" style="box-sizing: inherit; cursor: pointer; line-height: inherit; text-decoration: none;" target="_blank" title="Phase 5 | Covering Tracks
The final phase of covering track...">6. </a>Phase 5 | Covering Tracks The final phase of covering tracks simply means that the attacker must take the steps necessary to remove all semblance of detection. Any changes that were made, authorizations that were escalated etc. all must return to a state of non-recognition by the host network’s administrators.</li>
<li></li>
</ol>
<div style="margin-bottom: 5px;">
 
 
 
<ol class="j-transcripts transcripts no-bullet no-style" itemprop="text" style="box-sizing: inherit; line-height: 1.6; list-style: none; margin: 0px 0px 1.42857rem 1.4rem; padding: 0px;">
<li style="box-sizing: inherit; margin: 0px; padding: 0px;"> </li>
<li style="box-sizing: inherit; margin: 0px; padding: 0px;"></li>
</ol>
</div>
</div>

five phases of penetration testing

Summarizing the five phases of penetration testing from Madhn Rj 1. Summarizing The Five Phases of Penetration Testing 2. Phase 1 |...