Nt1330 Unit 9 Final Essay

598 Words2 Pages
bulb-icon

Recommended: Easy questions on security topics in operating system

Final Essay Questions This essay answers two questions. Question one is to describe the methods and tools used in scanning and enumerating system and network targets and how one can use the results during the rest of the penetration test. The second question concerns what is the favorite tool that this student learned about in this class, how one uses it and an explanation of why and how it enhances one’s ability to conduct a penetration test. The first step in a penetration test would be reconnaissance, or footprinting, to find the websites to determine the IPs for an intended victim and glean all available information. Next is scanning. Assuming ICMP messages are not blocked and firewall and IDS systems don’t interfere, one would determine the network range by …show more content…

This can give you the IP address, MAC address and vendor on machines. Then one runs the Nmap -A xxx.xxx.xxx.xxx* command with the same address range to obtain the operating systems on those same range of machines and what application version it is. This also gives the open ports and what services are running on them. Now the IP, MAC address, vendor, port information, services, Operating system and the version are known. After all this information is known, one can utilize a mapping tool such as Solar winds that can give an actual picture representation of the network to visualize things. Next is enumeration to discover more specifics such as user accounts, group settings and application settings. Depending on the OS, version and if NET Bios is enabled, one could use null sessions to find lists of machines, shares, users, groups, and users/host ids. Using the Windows command line, type:

Show More
Related

  • Alexander Rocco Corporation: A Case Study

    487 Words  | 1 Pages

    Commencing penetration tests within the infrastructure of Alexander Rocco Corporation may be a strenuous, yet beneficial process. However, before commencing penetration tests, much planning, strategizing, and research is necessary in order to ensure successful, seamless, and legal operations. Based on information provided by the SANS Institute, an initial meeting should be coordinated between those responsible for conducting the tests, along with the appropriate leadership personnel of the company (source). Within the meeting, the scope of the project should be established, classifying company data appropriately, and determining which components of the company’s infrastructure require penetration testing, which may include Alexander Rocco Corporation’s

    Read More

  • Nt1330 Unit 3 Essay

    498 Words  | 1 Pages

    In this report I will discuss different solutions for PVMS to help them improve network communications between the stores and head office, and centralize procedures for recording stock. This report will list the advantage and the disadvantage of each one.

    Read More

  • Nt1330 Unit 3 Essay

    603 Words  | 2 Pages

    ANSWER: User Configuration can be used in Group Policy to set policies that apply to users, regardless of which computer they log on to. User configuration contains various sub items for:

    Read More

  • Nt1310 Unit 6 Essay

    916 Words  | 2 Pages

    There are two versions of internet protocols, Internet Protocol Version 4 and Internet Protocol Version 6. I will quickly brief you on differences in security, mobility, addressing space, speed, ease of administration. And why IPv6 is the successor of IPv4.

    Read More

  • Kismet Vs Wireshark

    102 Words  | 1 Pages

    Both Kismet and Wireshark are excellent network analyzers. Wireshark possesses a complete packet in terms of collection, visualization, and easy user interface. Kismet provides location services, is small enough to run in small sensors and can be highly mobile. Also, the server/client mode allows for multiple operators to analyze the live capture simultaneously, making it the best tool for the task. Collecting information with Kismet requires familiarization with the software, but once completed the possibilities are diverse. For example, a small single chip computer or sensor placed on a strategically located area near wireless points can locate a user in the

    Read More

  • Nt1310 Unit 3 Major Essay

    1411 Words  | 3 Pages

    1. (45 pts) For each major (CS, IT, DET, IS), identify three important and uniquely identifying characteristics and describe how the four types of professionals would work together in a professional setting. Include information learned from the various instructors for each discipline. How do professionals from these areas work together?

    Read More

  • Unit 3 Assignment 1 Major Cybersecurity

    754 Words  | 2 Pages

    Penetration tests are typically conducted by ethical hackers whom exploit manual and automated practices to simulate attacks from both internal and external threats (Bace & Sinchak, 2014). Working hand-in-hand, vulnerability assessments and penetration tests afford the agile intelligence needed to help organizations deploy necessary security countermeasures to mitigate the likelihood and impact of attacks. This is especially important in a BYOD environment where devices models vary and are frequently refreshed.

    Read More

  • Nt1310 Unit 1 Research Application Essay Sample

    1404 Words  | 3 Pages

    Research My first research experience took place from the Fall 2012 – Summer 2013 in a neurobiology laboratory (Dr. Daniel Plas) focused on Parkinson’s Disease. In this project an undergrad student and I were tasked with optimizing a cellular medium for neural growth of the model organism Lymnaea stagnalis. This was comprised of following established protocols and altering certain variables within the formulas (differing concentrations of ions, pH, et al.) to observe growth pattern differences in vitro.

    Read More

  • Intrusion Detection Systems

    1596 Words  | 4 Pages

    In 1980, James Anderson’s paper, Computer Security Threat Monitoring and Surveillance, bore the notion of intrusion detection. Through government funding and serious corporate interest allowed for intrusion detection systems(IDS) to develope into their current state. So what exactly is IDS? An IDS is used to detect malicious network traffic and computer usage through attack signatures. The IDS watches for attacks not only from incoming internet traffic but also for attacks that originate in the system. When a potential attack is detected the IDS logs the information and sends an alert to the console. How the alert is detected and handled at is dependent on the type of IDS in place. Through this paper we will discuss the different types of IDS and how they detect and handle the alerts, the difference between a passive and a reactive system and some general IDS intrusion invasion techniques.

    Read More

  • Essay On Penetration Testing

    544 Words  | 2 Pages

    The term, “penetration testing”, often crosses our minds, but many a times we just let it go thinking of its literal meaning. A little curious folks give it a second thought, for, “what is it?” and “is it really needed?” So we are here to throw a little light on it and its benefits.

    Read More

  • Penetration Testing

    3197 Words  | 7 Pages

    Penetration testing - using tools and processes to scan the network environment for vulnerabilities, [03& T, J.K et al. 2002] there are many different types of vulnerability assessments. Penetration Testing focuses on understanding the vulnerabilities of components that you’ve made available on the network as seen from the perspective of a skilful and determined attacker who has access to that network. It will provide a thorough overview of the ...

    Read More

  • Penetration Testing a VM

    2383 Words  | 5 Pages

    A penetration test is performed on a system in order to find security threats. The pen tester carries out the same tests a hacker would do. The hacker is looking for vulnerabilities in the computer and network in order to exploit them and gain access. The pen tester performs the same task but wants to find and fix any security threats without harming or compromising the system. The pen tester has permission to perform vulnerability checkes wheras the hacker does not. (Add more).

    Read More

  • Statement of Purposefor a Masters in Cybersecurity

    1114 Words  | 3 Pages

    My exposure to the technicalities of Cybersecurity began during the first semester of my Bachelor’s degree in Computer Sciences. I decided to enroll in a course titled CISE L1( Certified Internet Security Expert Level 1) on Ethical Hacking and Internet Security which turned out to be an insightful experience involving cyber attacks and their countermeasures. The implementation lab in this course included gaining hands-on experience in tools like ProRat for Remote Administration, OphCrack to retrieve lost passwords, Cain & Able for ARP Poisoning and IP snooping, TrueCrypt for data encryption and Acunetix for Penetration Testing and auditing. Also, complex attacks like SQL Injections, DDos Attacks and hacking WPA networks were conducted in real-time scenarios. This experience has also further confirmed my strong suspicion that continuing my study of Cybersecurity in a graduate program is the right choice...

    Read More

  • Corporate Network Management

    1882 Words  | 4 Pages

    Networks in organisation are dynamic and complex entities which can be quite challenging to configure and manage. (Kim & Feamster 2013). These corporate networks consist of multiple routers, switches, firewalls, middleboxes and a particular advantage of network management is the ability to monitor the entire business network. As all the devices are interconnected with many event occurring simultaneously, problems with once device can eventually lead and spread throughout...

    Read More

  • Network Troubleshooting

    1510 Words  | 4 Pages

    Ethereal is a network analyzer. It has the ability to read packets from a network, decipher them, and then display the results with a very intuitive GUI. According to the book Ethereal Packet Sniffing, “the most important aspects of Ethereal are as follows: that it is open source, actively maintained, and free”. After conducting thorough research, Ethereal also supports TcpDump format capture filters, supports over 700 protocols (new ones are added on a regular basis), and the tool can capture data from Ethernet, Token Ring, 802.11 Wireless, etc. For anyone interested in a command line interface (CLI) interface for Ethereal, you’re in luck since there is a CLI available called tethereal.

    Read More

More about Nt1330 Unit 9 Final Essay

Open Document