119. Reconnaissance in Pentesting and 120. Performing a Basic Pentest

Reconnaissance

An initial phase where critical information about a target system is gathered to enhance an attack’s effectiveness and success

Active Reconnaissance

Direct engagement with the target system, offering more information but with a higher detection risk

Passive Reconnaissance

Gathering information without direct engagement with the target system, offering lower detection risk but less data

Known Environment

Detailed target infrastructure info from the org is received prior to the test

Partially Known Environment

Involves limited info provided to testers, who may have partial knowledge of the system

Unknown Environment

Testers receive minimal to no info about the target system

Known Environment Testing Purpose

To thoroughly evaluate the vulnerabilities and weaknesses in the already known assets and how they can be exploited

Partially Known Environment Testing Purpose

Aims to identify vulnerabilities in both known and hidden assets

Unknown Environment Testing Purpose

Aims to mimic an external attacker with limited knowledge

Metasploit

Multi-purpose computer security and penetration testing framework that encompasses a wide array of powerful tools, enabling the execution of penetration tests