Scribd Logo
Upload

Welcome to Scribd!

  • Notes Sur Le Cours 1

    Uploaded by

    Lalla DEMBELE
    1 views1 page
    The document outlines the phases of a cyber attack including pre-attack information gathering through fingerprinting and reconnaissance to identify systems, services, and vulnerabilities. The exploitation phase attempts to gain access to systems, while post-exploitation maintains access, escalates privileges, and covers tracks. Pre-attack phases provide information on operating systems, running services and versions, usernames, passwords, and other details to inform vulnerability analysis and exploitation.

    Original Description:

    Original Title

    Notes sur le cours 1.txt

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document outlines the phases of a cyber attack including pre-attack information gathering through fingerprinting and reconnaissance to identify systems, services, and vulnerabilities. The exploitation phase attempts to gain access to systems, while post-exploitation maintains access, escalates privileges, and covers tracks. Pre-attack phases provide information on operating systems, running services and versions, usernames, passwords, and other details to inform vulnerability analysis and exploitation.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    1 views1 page

    Notes Sur Le Cours 1

    Uploaded by

    Lalla DEMBELE
    The document outlines the phases of a cyber attack including pre-attack information gathering through fingerprinting and reconnaissance to identify systems, services, and vulnerabilities. The exploitation phase attempts to gain access to systems, while post-exploitation maintains access, escalates privileges, and covers tracks. Pre-attack phases provide information on operating systems, running services and versions, usernames, passwords, and other details to inform vulnerability analysis and exploitation.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    of 1

    l'analyse de donnée

    scanning - detective
    enumeration

    les 3 phases

    A) Les phases de pré_attaques


    1- Information gathering
    - Footprinting
    - fingerprinting
    - passive reconnaissance
    2- detecting live system
    - sacanning
    - active reconnaissance
    3- Enumeration
    usename, password, share, etc

    4- Vulnerability management
    - Vulnerability scanning
    - Vulnerability Analysis

    B) Gaining Acces ( Exploitation )


    Success No Success
    C) Post-Exploitation D) DoS/DDoS
    1. Maintining Access
    2. Esclate Privileges
    3. Cover Tracks
    les phases de pré_attaques 1.2.3 vont nous permettre :

    - OS
    -services run-time ( TCP ou/et UDP )
    -version service
    -username
    - password hash
    -Email
    -etc...

    vulnerabilité = faiblesse

    -- Know vulnerability : CVE cve.mitre.org


    CVE-AAAA-Number
    --- Know weakness: CWE cwe.mitre.org

    You might also like