Reconnaissance using Python Code snippets:https://github.com/RiteshAgrawal/cyber-recon

1. Reconnaissance using
Python

2. $ whoami
Ritesh Agrawal
udr.ritesh@gmail.com
Software Engineer at Cyware
https://www.linkedin.com/in/riteshagrawal18/

3. Attack Planning

4. Attack Phases
● Reconnaissance
● Weaponization
● Delivery
● Exploitation
● Installation
● Command and Control
● Actions on Objective

5. Reconnaissance

6. Reconnaissance
● Gather information about target and available assets
● Goal is to find weak points
● Discovery of deployed defense systems
(Examples)

7. Reconnaissance Types
● Active
● Passive

8. Cyber Reconnaissance

9. Techniques
● Address Sweep
● Port Scanning
● Service fingerprinting
● OS Discovery
● Directory Scan
● Robots.txt
● Whois
● Social Engineering
● DNS Recon
● Recon about running services (Web app, ftp, etc)
● More ...

10. “Talk is cheap, show me the code” - Linus Torvalds

11. Setting up the environment

12. Python 101

13. Socket Programming Overview

14. Socket
Endpoint to allow communication between two processes running on same or
different system
import socket
# Creating a socket
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

15. HTTP GET Call using Python Socket

16. Port Scanner

17. Whois Details

18. NMAP

19. Social Engineering
https://www.youtube.com/watch?v=lc7scxvKQOo

20. Defense Steps

21. Defense Steps
● Port Hardening
● Setup of DMZ and internal network
● Put Dev and test environment machines behind proxy server
● Awareness about phishing and social engineering attempt
● Do recon yourself before someone else do it

22. Thanks !