Lecture 5 Flashcards
What is the purpose of enumeration tools?
To discover assets and manage vulnerabilities.
Define Enumeration.
Scanning the network & hosts to map out the attack surface.
What are the two main methods of enumeration?
- Active
- Passive
What types of reconnaissance tools are used in mapping?
- Open-source Intelligence (OSINT)
- Foot-printing
- Fingerprinting
What is the difference between foot-printing and fingerprinting?
- Foot-printing: Maps out network layout focusing on TCP/IP stack info, routing topology, DNS, domains, hostnames.
- Fingerprinting: Detects host systems focusing on open ports, OS types, versions, services.
What is an example of internal scanning?
Scanning from subnet #1 in vCluster.
What is an example of external scanning?
Scanning from subnet #3 in vCluster.
- systeminfo/hostnamectl
- nmap
- zenmap (GUI nmap)
- unicornscan
What are these examples of?
Enumeration tools
- traceroute
- ifconfig/ipconfig
- dig/nslookup
- ping
What are these examples of?
Enumeration tools
- megaping
- hping3
- hostname
- arp
What are these examples of?
Enumeration tools
What is the goal of enumeration?
To scan/identify network ranges and hosts belonging to the target.
True or False: Passive enumeration requires an active connection to assets.
False
