In this section of the course, we're going
to explore scanning and enumeration
which are key steps in the penetration testing process
where we begin to actively probe the target
for specific vulnerabilities.
Enumeration is like detective work of cybersecurity.
It involves taking the information we've gathered
during the OSINT phase
and digging deeper, actively searching the target system
to learn about the services, users,
and devices that exist on the network
and how they're configured.
This phase is very important
because it helps us understand the target's landscape
in detail, identifying any potential points of entry
and sensitive data that could be exploited.
Our focus inter intersection will be centered
around Domain 2: Reconnaissance and Enumeration.
This section will be solely focused on Objective 2.2
which states that given a scenario, we must be able
to apply enumeration techniques.
We'll begin by focusing on OS
and Service Discovery,
where we'll conduct a demo to show you how
to identify what operating systems are in use
and what services are running on those systems.
This is key to finding vulnerabilities specific to versions
of systems being used.
Next, we'll move on to Enumerating Protocols.
Here, we'll learn how to identify the communication rules
that devices use to exchange data over the network.
Understanding these can reveal potential security weaknesses
in how information is transmitted and processed.
Enumerating DNS will be the next topic
that we'll cover after.
By examining how a target's domain names are structured
and managed, we can uncover a lot
of information about the internal
and external network setup.
Next, we'll talk about Enumerating Directories,
and we'll explore how to discover the structure
of web applications and file systems.
This can often reveal hidden pages
or sensitive information that's not meant to be public.
Then we'll discuss the topic of Enumerating Hosts,
which will help us understand the landscape of the network,
identifying all of the devices connected to it
and potentially finding unsecured entry points.
Following that in the Enumerating Users lesson,
we'll look at how to identify the people
who have user accounts on those systems.
Knowing who has access can help us understand potential
insider threats or find user accounts
that might be easier to compromise.
Then, we'll focus on Enumerating Emails in which we'll dive
into gathering email addresses associated
with the target organization.
These can be used for phishing attacks
or to gather more information
about the organization's structure.
Next, we'll discuss Enumerating Permissions
which is all about finding out who has access to what.
By understanding the permissions assigned to different users
and groups, we can identify potential misconfigurations
that could be exploited.
Then we'll discuss Enumerating Wireless Devices
which will focus on discovering devices that connect
to the network wirelessly.
These can be often less secure
and provide a easy way in for an attacker.
After that, we'll look at a lesson on a Enumerating Secrets
where we'll be looking for hard-coded
or poorly secured credentials
that can give us direct access to systems.
Following that, we'll discuss Enumerating the Web
which involves looking at web applications in detail
to find vulnerabilities that can be exploited.
And lastly, the lesson Attack Path Mapping will teach us how
to take all of the information that we've gathered
and map out potential paths an attacker could take
to compromise the network.
Finally, we will take a short quiz to see
what you learned on this section of the course,
and review each of those quiz questions fully to ensure
that you can explain why each answer was right.
So if you're ready to dive into the world of scanning
and enumeration, let's get started with this section
of the course.