Skip to main content

Phases of Hacking

Reconnaissance 

  • It is also known as footprinting or information-gathering phase
  • In this phase, information is gathered on three major groups/ categories
    • Host
    • Network
    • Number of people involved in the network
  • Before carrying out the attack this is the preparatory phase to gather information about the target in order to carry out a successful attack


Fig 1.1 Comparison of types of reconnaissance

Scanning

  • This phase involves using the information gathered in the first phase to find vulnerabilities in the network that the hacker wants to hack. 
  • It consists of three types of scanning


Fig 1.2 Comparison of types of scanning

Gaining access

  • In this phase, the attacker finally manages to break into the system/network using certain tools, techniques, and processes by exploiting some vulnerabilities. 
  • The attacker tries to get the administrator access to the network so that he can make changes to the system easily and effectively. 

Maintaining access

  • During this phase, the attacker intends to maintain access to the target system/network. 
  • He tries to maintain this access until he finishes the task he aimed to accomplish in that target.
  • The attacker wants to maintain access in the background without letting the user/administrator know about it. 
  • This can be done using trojans, rootkits, or other malicious files/software.

Clearing track

  • The attacker also does not want to be caught thus in this last phase he clears all potential evidence that may lead to his arrest. 
  • This involves clearing server logs, modifying registry values, uninstalling all applications, and deleting all folders, software, and malicious files.


Comments

Popular posts from this blog

Introduction to Ethical Hacking and Cyber Security

All of us get fascinated by images of people working on systems in dark rooms with their hoodies on their heads.  It looks so classy and cool after all! But, do we actually know what those people do, and do such people really exist? So in this very first blog  I would tell you what they do and who they are? What is hacking? It is the process of finding vulnerabilities and security breaches in a system to gain access to the data and/or corrupt files in a network, website, software, or any electronic device or to violate the privacy of others.  Then what is ethical hacking? Ethical Hacking is similar to hacking only the intention of gaining access is not malicious. It is legal and to safeguard systems from cyber-attacks and threats.  What is cyber security? It is the protection of data, confidential information such as passwords, pin codes etc., and personal information stored in inter-connected systems or software and hardware from cyber threats and digital attac...