Red Team Recon Techniques | Red Team Series 2-12
This guide is part of the HackerSploit Red Team series of guides. Reconnaissance consists of techniques that involve adversaries actively or passively gathering information that can be used to support targeting. Such information may include details of the victim organization, infrastructure, or staff/personnel. This information can be leveraged by the adversary to aid in other phases of the adversary lifecycle, such as using gathered information to plan and execute Initial Access, to scope and prioritize post-compromise objectives, or to drive and lead further Reconnaissance efforts.
Chapters:
0:00 Introduction
1:21 What is Reconnaissance?
3:34 Mitre Attack Recon Techniques Overview
4:50 Let’s Begin with Passive Reconnaissance
5:22 Using the host command
6:06 Using the nslookup command
6:28 Using the traceroute command
7:20 Using the dnsrecon command Passively
8:42 Using the wafw00f command
9:20 Using the dig command
12:48 Using the WHOIS Utility
13:48 Using Netcraft
16:13 Using DNS Dumpster
17:46 Using whatweb
20:59 Using Browser Addons
23:06 Gathering Employee Information
23:30 Using the Harvester
29:18 Subdomain Enumeration
38:29 Active Intelligence Gathering
38:40 Using dnsrecon Actively
40:57 Brute Forcing Subdomains with Fierce
43:30 Using knockpy
46:19 Using Port Scanning
49:20 Vulnerability Scanning
52:30 Directory Brute Forcing
54:17 Automating these Tests
56:38 Scanning with Sniper (Active)
58:30 Scanning with Sniper (Passively)
1:02:32 Using Amass – Basic Scan
1:08:14 Using Amass – Advanced Scan
1:10:58 Using the viz Subcommand
1:12:30 Viewing Reports
1:15:05 Performing Passive Recon with recon-ng
1:24:18 Conclusion
New to Linode? Get started here with a $100 credit!
Read the doc for more information on Caldera.
Learn more about Hackersploit.
Subscribe to get notified of new episodes as they come out.
#Linode #Security #RedTeam #Hackersploit
Product: Linode, Security, Red Team; Hackersploit;
You might also like…
-
Incident Response with Fireeye | Final Hackersploit Blue Team Training
In this video, @HackerSploit covers using FireEye's Redline for incident response, which lets users find signs of malicious activity. -
How to Reset SSH Host Keys when Deploying Linux Templates in Proxmox
In this video, we'll go over how to create a new set of SSH host keys for each instance that you create from an image. -
Brute Force Protection | Linux Security with HackerSploit
In part 2 of the Linux Security series, HackerSploit shows how to set up fail2ban on a server to prevent brute force SSH attacks. -
Security Survey Shows Companies Not Fully Prepared For API Attacks Rupesh Chokshi – Akamai
In this video, Akamai Senior Vice President and General Manager of Application Security Rupesh Chokshi shares his insights.