# data[].attributes.body
a beginners guide to ethical hacking
gaining the advantage - applying cyber kill chain to network activity
Kali-Linux revealed-2021 edition
PentaRoot- Five phases of penetration
Senior IT-engineer.docx
Bash-Beginners-Guide
editing-nano
Thirty-useful-unix commands
vi-ref

# data[].attributes.headline
Difference between hacking and ethical hacking

# data[].attributes.subject
Difference between hacking and ethical hacking

# data[].attributes.body
Hacking is essentially breeching security to extract information without permission is bad, but with the permission of others will it fall under ethical hacking.

# data[].attributes.headline
What are the different phases of the cyber kill chain?

# data[].attributes.subject
What are the different phases of the cyber kill chain?

# data[].attributes.body
Reconnaisance (Target identification)

This is the planning phase for attackers which they would conduct research to understand their targets.

Weaponization (Preparation for operation)

This is the preparation and staging phase for attackers, where they would use different tools to make a deliverable payload.

Delivery (Launching of operation)

This is the launching phase where the official operation has begun and malware is delivered to the target.

Exploitation (Gaining access to the victim)

This is the exploitation phase, where the attacker must exploit a vulnerability to gain access. Phrases like zero-day refer to exploit codes used in this step.

Installation (Installation phase)

This is the installation phase, where the attacker installs a persistent backdoor to maintain access to the target for an extended period of time.

Persistent backdoors are backdoors that can survive a reboot.

Command & Control (Controlling phase)

This is the command & control phase, where the attacker has the ability to remotely control the victim's machine through command channels.

Actions on objectives (The goal of the attacker)

This is the objectives phase, where the attacker has successfully gained control over the victim's system.

Whatever happens next depends on the ultimate objectives of the attacker, such as privilege escalation, collect and exfiltrate data.

# data[].attributes.body
Hacking:
1. Steal valuable information of company and individual for illegal activity
2. Illegal practice and considered a crime
3. Such types of hackers are called black-hat hackers
4. Such hackers try to access restricted networks through illegal practices and reduce the security of data
5. They work for themselves for dirty money

Ethical Hacking:
1. Hack system to reduce vulnerabilities of company’s system
2. Legal practice, authorized by the company or individual
3. Such types of hackers are called white-hat hackers
4. Such hackers create firewalls and security protocols
5. They work with different government agencies and big tech companies

# data[].attributes.headline
Penetration Testing: Rules of engagement

# data[].attributes.subject
Penetration Testing: Rules of engagement

# data[].attributes.body
- Conduct a penetration test on the company's file server while excluding the webserver.

- Schedule penetration testing to take place outside regular office or peak hours.

Who Should Be Informed:

- 'Whitebox': Ensure that penetration testing is transparent and known to all parties involved.

- 'Blackbox': Simulate a genuine attack scenario without prior knowledge, such as executing a social engineering attack on a helpdesk agent to obtain a password reset.

# data[].attributes.body
Pen testing aims to identify vulnerabilities and risks in the system which may impact the confidentiality, integrity, and availability of the data by emulating a real DDoS attack.

# data[].attributes.body
1. Meeting compliance
2. Maintaining confidentiality, revenue and goodwill
3. Maintaining confidentiality, revenue and goodwill
4. Security training for network staff
5. Testing new technology implementation

# data[].attributes.body
Red Team: Comprised of ethical hackers, this group assesses an organization's security defenses by simulating attacks. Essentially, they act as penetration testers.

Blue Team: The cybersecurity defense unit responsible for identifying and responding to the red team's attacks. They employ measures like intrusion detection systems, firewalls, and honeypots to counter or disrupt the attackers.

Green Team: Legitimate users within the organization's network and IT system who are often targeted by the red team for different purposes.