Section 13.119 Reconnaissance in Pentesting

Question 1

Reconnaissance

Answer 1

Initial phase where an attacker gathers information about the target system. This information helps plan the attack and increase its success rate

Question 2

Importance of Reconnaissance

Answer 2

Crucial step in penetration testing which identifies potential vulnerabilities in the target system

■ Helps plan the attack to reduce the risk of detection and failure

Question 3

Types of Reconnaissance

Active Reconnaissance

Answer 3

Engaging with the target system directly, such as scanning for open ports using tools like Nmap

Question 4

Types of Reconnaissance

Passive Reconnaissance

Answer 4

Gathering information without direct engagement, like using open-source
intelligence or WHOIS to collect data

Question 5

Reconnaissance and Environment Types

Known Environment

Answer 5

Penetration testers have detailed information about the target infrastructure

● Focuses on known assets
● Evaluates vulnerabilities and weaknesses
● Aims to understand exploitability and potential damages
● Resembles an insider threat scenario

Question 6

Reconnaissance and Environment Types

Partially Known Environment

Answer 6

Testers have limited information, simulating a scenario where an attacker
has partial inside knowledge

● Focus on discovering and navigating the broader environment

Question 7

Reconnaissance and Environment Types

Unknown Environment

Answer 7

Minimal to no information about the target system

● Simulates a real-world external attacker aiming to find entry points and
vulnerabilities

● Extensive reconnaissance is essential