Hacking Methodology | 3rd | week 2 |.
In this lesson, we present the hacking methodology for systematically, exploit the vulnerability on the target systems, and understanding the hackers mentality. Here we show the hacking methodology presented in the back cover of hacking expose textbooks by Mcclure et al. In the middle we see the steps, in the right we see the example of the tool and command they use. Hacker will start by surveying and gathering information about the organization they intend to penetrate and hack into. This step is called footprinting. The right column here show the command we use to obtain those related information in the internet about the organizations. We have whois you can type in most of the nicknacks system and it will return those critical organization information about administrator and the technical contact information, how many server, name server, are serving that particular domain. And we also see the netscraft as one of the command. Actually one of the website that provide a query, allow you to type in a domain name, and it track all of the Web servers they've used for that organization, over the years; including the operating system and the version. And we were able to find that information very valuable. Next steps, the second step is scanning. Here we use and Nmap command or one of the famous tool called nexus. It allows us to find out what other machines within that domain or subnet range, network adjust range, how many machine are active, how many server are active and what are the ports which represent the specific service that are open.