+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: Recon, what steps do you take. (/Thread-Recon-what-steps-do-you-take)
Pages:
1
2
RE: Recon, what steps do you take. - Eclipse - 05-27-2014
(05-27-2014, 06:32 AM)antlers Wrote: Sorry m8, I think you misunderstood the question.
wappalyzer seems awesome, thanks mate.
Also thanks for helping me gain root on my calculator.
This made my day...
(05-27-2014, 03:19 AM)DarkMuse Wrote: Here's what you do: download vmware or virtualbox. Download Kali Linux and install it to a new virtual machine. Start googling tutorials on each application within it. Also I recommend installing Veil in the Kali Linux VM. Very useful and effective for FUDing Payloads.
Not really recon, but good for a beginner.
Re: RE: Recon, what steps do you take. - DarkMuse - 05-27-2014
(05-27-2014, 06:32 AM)antlers Wrote: Sorry m8, I think you misunderstood the question.
wappalyzer seems awesome, thanks mate.
Also thanks for helping me gain root on my calculator.
I guess maybe a more specific body of your post might be helpful next time...
RE: Recon, what steps do you take. - Dyme - 05-27-2014
(05-27-2014, 12:51 PM)DarkMuse Wrote: I guess maybe a more specific body of your post might be helpful next time...
I guess maybe you should be sure you're correct before whipping out the "where the fuck are you" next time...
Re: RE: Recon, what steps do you take. - DarkMuse - 05-27-2014
(05-27-2014, 03:34 AM)Dyme Wrote: Lol wtf does that have to do with recon.
(05-27-2014, 01:54 PM)Dyme Wrote: I guess maybe you should be sure you're correct before whipping out the "where the fuck are you" next time...
Top lel
RE: Recon, what steps do you take. - superMAUS - 05-27-2014
(05-27-2014, 12:51 PM)DarkMuse Wrote: I guess maybe a more specific body of your post might be helpful next time...
Ok,
I guess everyone has their own opinions <3 <3Spoiler:
Fuck you.
Re: RE: Recon, what steps do you take. - DarkMuse - 05-27-2014
(05-27-2014, 02:09 PM)antlers Wrote: Ok,
Spoiler:
Fuck you.
Well I'm sorry I upset you
Spoiler:
No worries. I still love you.
RE: Recon, what steps do you take. - ICE_ - 05-27-2014
1. Identify website assets (what is most important to the website, user panel? search? Control panel? etc.)
2. Identify primary focus of website (what page are they trying to get everybody to go to? Services? Products? About? etc.)
3. Identify all input fields (buttons, options, text fields)
4. Identify service versions (what version of this calender are they using? what version of ------ are they using? etc.)
5. Identify version based vulnerabilities within services (version 3.0 of this calender is vulnerable to x y and. etc.)
6. Identify protection systems (IDS, IPS, WAF, etc.)
7. Identify basic global vulnerability possibilities within input fields (this field MIGHT be vulnerable to x y and z)
8. Identify ease of exploit for service vulnerabilities
9. Identify ease of exploit of global vulnerabilities
10. Identify more advanced vulnerabilities (CSRF, XST, etc.)
11. pen test
RE: Recon, what steps do you take. - Alan Turing - 05-29-2014
(05-27-2014, 01:54 PM)Dyme Wrote: I guess maybe you should be sure you're correct before whipping out the "where the fuck are you" next time...
i hav a seizure b0ss
RE: Recon, what steps do you take. - superMAUS - 05-29-2014
(05-27-2014, 11:53 PM)ICE_ Wrote: 1. Identify website assets (what is most important to the website, user panel? search? Control panel? etc.)
2. Identify primary focus of website (what page are they trying to get everybody to go to? Services? Products? About? etc.)
3. Identify all input fields (buttons, options, text fields)
4. Identify service versions (what version of this calender are they using? what version of ------ are they using? etc.)
5. Identify version based vulnerabilities within services (version 3.0 of this calender is vulnerable to x y and. etc.)
6. Identify protection systems (IDS, IPS, WAF, etc.)
7. Identify basic global vulnerability possibilities within input fields (this field MIGHT be vulnerable to x y and z)
8. Identify ease of exploit for service vulnerabilities
9. Identify ease of exploit of global vulnerabilities
10. Identify more advanced vulnerabilities (CSRF, XST, etc.)
11. pen test
Good stuff.
RE: Recon, what steps do you take. - Eclipse - 05-29-2014
(05-27-2014, 11:53 PM)ICE_ Wrote: 1. Identify website assets (what is most important to the website, user panel? search? Control panel? etc.)
2. Identify primary focus of website (what page are they trying to get everybody to go to? Services? Products? About? etc.)
3. Identify all input fields (buttons, options, text fields)
4. Identify service versions (what version of this calender are they using? what version of ------ are they using? etc.)
5. Identify version based vulnerabilities within services (version 3.0 of this calender is vulnerable to x y and. etc.)
6. Identify protection systems (IDS, IPS, WAF, etc.)
7. Identify basic global vulnerability possibilities within input fields (this field MIGHT be vulnerable to x y and z)
8. Identify ease of exploit for service vulnerabilities
9. Identify ease of exploit of global vulnerabilities
10. Identify more advanced vulnerabilities (CSRF, XST, etc.)
11. pen test
This is actually quite good. :thumbsup: