Response | Assessments cont’d

• External cont’d

  • Target vulnerabilities
    • Banner analysis... server response to port scans
    • Use DB of techniques
    • Use search engines at hacker sites like RootShell
  • Exploit
    • Automatic attack tools
    • Man-in-the-middle attacks
    • Secondary exploitation... penetrate one machine, launch new attacks from it