Attack Methodology

Extortion

It is also possible to disrupt an organizational by using cyber-warfare attacks in conjunction with conventional tactics like bribery, extortion and even torture. These classical criminal methods are perhaps most…

Denial of Service

A Denial Of Service (DOS) attack is an attack designed to prevent some information resource from being used. This can include jamming up network pipes with traffic that slows down…

Alter Data

One way that an attacker might use to disrupt an organization could be to alter data. This could either be done overtly or covertly, depending on the purpose:

Integrated Attack Strategy

Integrated attack strategies involve combining hacking computer systems with attack vectors such as: espionage, blackmail, medical/health attacks, asymmetric “guerrilla-style” attacks, weapons of mass destruction, and conventional kinetic military attacks. The…

Meterpreter

Metasploit has a payload component called Meterpreter that is injected inside a running process and offers a command environment to the attacker. This avoids starting a new process and keeps…

Agents

It is also possible to launch relayed pivot attacks through “agents” installed by sophisticated penetration testing tools. Core Impact agents, once deployed on a target system can be set as…

Relays

One way to launch an attack from a compromised system is to transfer all the tools you need to perform the attack over to the compromised system. Another way to…

Pivot Recon

In order to launch a pivot attack against another system, the attacker needs standard recon information. This includes the IP address, ports that are open and services responding on the…