Security Reconnaissance

Question 1

Network Reconnaissance

Answer 1

Mapping out the attack surface of an organisation - to probe a security system as apart a security assessment and monitoriting

Question 2

Footprinting

Answer 2

Scans for hosts, IP ranges and routes between networks to map the infrastructure

Question 3

Topology Discovery

Answer 3

Topology discovery technique to map out the structure of a network. Used to map information before an attack. Can also be used to build an asset register.

Question 4

Passive foot printing

Answer 4

Using open source data to identify information, social networking, corporate media accounts, social engineering, dumpster diving

Question 5

Give an example of passive foot printing

Answer 5

Social engineering, dumpster diving, searching for information on social media

Question 6

OSIT

Answer 6

Open source information tools- gathers passive information

Question 7

Wardriving

Answer 7

Combines WIFI analysis with GPS locations to identify wireless networks and collect WIFI details as you drive around the streets or use a drone

Question 8

What information can you collect from Wardriving/ Warflying

Answer 8

WI-FI names, WIFI connection frequencies, where are the access points for a wireless network