All Questions
Tagged with reconnaissance penetration-test
6 questions
5
votes
2
answers
802
views
How do pentesters approach a large complex network?
Lots of books talk about using tools such as whois and other information gathering tools to collect information on the network and of course, not forgetting nmap. However, in a real network with such ...
- 439
0
votes
1
answer
1k
views
Techniques to find out the domain a given name server resolves for
So I am asking this question cause I have been stuck in this situation a few times while carrying out pen tests.
A few times I find an IP with DNS service up and running and I am not able to find out ...
- 1
1
vote
2
answers
3k
views
How can you enumerate an internal network with minimal outside knowledge?
The scenario is that you get to plug your laptop into an Ethernet port in some building. You get an IP address (DHCP) and can access the internet.
Right out of the gate you know your IP, gateway, ...
- 758
0
votes
1
answer
232
views
Is it a good idea to preventive use a robots.txt that disallows all search engines to index query strings in order to slow down reconnaissance?
I know that robots.txt is not a security feature. But, indexed and cached information by search engines might be incredibly helpful in the reconnaissance phase of a penetration test and potentially ...
- 7,055
3
votes
2
answers
1k
views
Can I trick a mail server into sending me an email?
Can I trick a mail server into sending me an email? I would like to do some email header analysis on the emails that are send by a mail-server in a penetration-test and possibly get to know more ...
- 7,055
1
vote
1
answer
278
views
Is using a website copier considered active reconnaissance in penetration testing?
New to PT and would like to test recon skills.
First, is this considered passive or active recon? Second, would I be jumping into a legal gray area if I used a tool like this on a buiness' website? ...
- 11