Information Gathering

Phishing

WEB

Recognises when vulnerabilities discovered elsewhere can be leveraged as part of a phishing campaign

Industry Roles:

Assessment Methods:

Understands common phishing techniques and how these can lead to compromise

Industry Roles:

Assessment Methods:

SNMP

WEB

Can retrieve information from SNMP services and understands the MIB structure pertaining to the identification of security vulnerabilities

Industry Roles:

Assessment Methods:

Banner Grabbing

WEB

Can enumerate services, their software types and versions, using banner grabbing techniques

Industry Roles:

Assessment Methods:

Information Leakage

WEB

Can obtain information about a target network from information leaked in email headers, HTML meta tags and other locations, such as an internal network IP addresses

Industry Roles:

Assessment Methods:

Search Engines, News Groups and Mailing Lists

WEB

Can obtain information about a target network from information leaked in email headers, HTML meta tags and other locations, such as an internal network IP addresses

Industry Roles:

Assessment Methods:

Can use search engines, news groups, mailing lists and other services to obtain information about a target network, such as the name and contact details of the network administrator

Industry Roles:

Assessment Methods:

Website Analysis

WEB

Can analyse information from a target web site, both from displayed content and from within the HTML source

Industry Roles:

Assessment Methods:

Can interrogate a website to obtain information about a target network, such as the name and contact details of the network administrator

Industry Roles:

Assessment Methods:

DNS

WEB

Can identify the presence of dangling DNS entries and understands the associated security vulnerabilities (e.g. susceptibility to subdomain takeover)

Industry Roles:

Assessment Methods:

Can demonstrate how a DNS server can be queried to reveal other information that might reveal target systems or indicate the presence of security vulnerabilities

Industry Roles:

Assessment Methods:

Can demonstrate how a DNS server can be queried to obtain the information detailed in these records

Industry Roles:

Assessment Methods:

Understands the Domain Name Service (DNS) including queries and responses, zone transfers, and the structure and purpose of records, including: • SOA • NS • MX • A • AAAA • CNAME • PTR • TXT (including use in DMARC policies) • HINFO • SVR

Industry Roles:

Assessment Methods:

Domain Registration

WEB

Understands the format of a WHOIS record and can obtain such a record to derive information about an IP address and/or domain.

Industry Roles:

Assessment Methods:

Please wait...