Physical Attacks
Physical attacks are attacks that involve penetrating the physical security protecting information systems. In a facility with low physical security or public access, it can be as simple as walking…
Application Attacks
Application attacks focus on application software instead of the operating system, where most classical perimeter exploit vulnerabilities are found. A wide variety of application attacks are aimed at web servers…
Client-side Attacks
Client-side attacks take advantage of weaknesses found in client software usually running on users workstations. Most client-side attacks involve either a web link to a web page that can deliver…
Wireless Attacks
Wireless attacks are constantly changing and so are the defensive techniques used against them. Here are some of the areas involved with different wireless attacks: Recon Most wireless attacks start…
Perimeter Attacks
Perimeter attacks involve using exploit code to take advantage of weaknesses detected in perimeter devices to take control of them or leverage some level of access into greater access. The…
Operations Security = OPSEC
Operations Security or OPSEC is about identifying critical information that can be used against you by an opponent and minimizing access to that information. This is a sub process of…
Sniffing Recon
Performing reconnaissance by sniffing packets requires access to the network data stream. In most cases, that implies some form of attacker presence already inside the network perimeter. Given that it…
Network Scanning Recon
Network scanning usually begins with discovering ranges of IP addresses and then specific systems within those ranges. Once the live systems have been located, they are scanned for responding ports…
Google Recon
Going beyond simply reading a web page and extracting helpful information from it, google can be used to find much more information that can aid an attacker. Searching for target…
General Recon
General reconnaissance includes all the conventional means of collecting information that are not included in the other recon techniques: Public record research Most of this type of research used to…