Information gath

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

INFORMATION GATHERING
IN A PENTEST
By : Syarif
@ﬂ3xu5
Cybercrime Investigation Center Mabes Polri
Jakarta, 28 Januari 2012

Agenda
About Pentest ( Penetration Testing )
Pentest Phase
How Important do Information Gathering
Passive & Active Informa...

About Pentest ( Penetration Testing )
A method to evaluate the security of computer system / network
Practice ( attacking ...

Pentest Phase
Information Gathering
Vulnerability Analysis
Exploitation
Post Exploitation
Reporting

How Important do Information Gath.
Information Gath. Chance of Successful attack~

Passive & Active Information Gathering
Passive Information Gathering Active Information Gathering
Google Hacking
Netcraft
...

Google Hack
was introduced by Johnny Long
based on google basic usage information :http://
www.google.com/help/basics.html...

Google Hack ( cont’d )
Google basic search help

Google Hack ( cont’d )
Operators and More Search help

Google Hack ( cont’d )
Examples :

Google Hack ( cont’d )
Examples :

Google Hack ( cont’d )
Examples :

Google Hack ( cont’d )
Other Examples :

Google Hack ( cont’d )
Other Examples :

Google Hack ( cont’d )
More Examples :

Netcraft
an Internet monitoring company based on England
Uptimes
OS detection
web server

Netcraft ( cont’d )

Whois

host

dig

REFERENCES
http://www.pentest-standard.org/index.php/
PTES_Technical_Guidelines
http://www.metasploit.com/about/penetratio...

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

Top clipped slide

1 of 21 Ad

1 of 21 Ad