blog (28598) seo (21108) security (9558) web applications (1051) hacking (890) infosec (281) ethical hacking (183) penetration tester (18) infosec shinobi (1) rotimi akinyele (1)
My team, was recently engaged by a client ( Hackme ) to perform a black-box external penetration test. The objective was simple – see how susceptible the organization is from an external point of view and test the effectiveness of the security controls that are managed enterprise-wide. As such, asides, the company name, we were given “ZERO” information.
The following details illustrates how we embarked upon this assessment which resulted in… Well, read on…
We kicked off with some OSINT 101 :). There are quite a number of open source intelligence tools – to assist in gathering emails, subdomains, hosts, employee names, etc from different public sources like search engines and shodan. There is an exhaustive list of such awesome tools here .