https://padlet.com/22032047_3/j0a729if5o2b29r1 en-us 2023-10-19 01:42:52 UTC 2023-10-26 01:45:47 UTC hello@padlet.com https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753688238 a beginners guide to ethical hacking
gaining the advantage - applying cyber kill chain to network activity
Kali-Linux revealed-2021 edition
PentaRoot- Five phases of penetration
Senior IT-engineer.docx
Bash-Beginners-Guide
editing-nano
Thirty-useful-unix commands
vi-ref

]]> 2023-10-19 01:45:29 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753688238 22032047_3 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753688703 2023-10-19 01:45:45 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753688703 22032047_3 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753688918 2023-10-19 01:45:53 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753688918 22032047_3 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753694478 Hacking:
1. Steal valuable information of company and individual for illegal activity
2. Illegal practice and considered a crime
3. Such types of hackers are called black-hat hackers
4. Such hackers try to access restricted networks through illegal practices and reduce the security of data
5. They work for themselves for dirty money

Ethical Hacking:
1. Hack system to reduce vulnerabilities of company’s system
2. Legal practice, authorized by the company or individual
3. Such types of hackers are called white-hat hackers
4. Such hackers create firewalls and security protocols
5. They work with different government agencies and big tech companies

]]> 2023-10-19 01:49:52 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753694478 22032047_3 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753696388 2023-10-19 01:51:13 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753696388 22032047_3 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753697867 2023-10-19 01:52:15 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753697867 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753698032 Hacking is essentially breeching security to extract information without permission is bad, but with the permission of others will it fall under ethical hacking.]]> 2023-10-19 01:52:23 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753698032 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753702713 Reconnaisance (Target identification)

This is the planning phase for attackers which they would conduct research to understand their targets.

Weaponization (Preparation for operation)

This is the preparation and staging phase for attackers, where they would use different tools to make a deliverable payload.

Delivery (Launching of operation)

This is the launching phase where the official operation has begun and malware is delivered to the target.

Exploitation (Gaining access to the victim)

This is the exploitation phase, where the attacker must exploit a vulnerability to gain access. Phrases like zero-day refer to exploit codes used in this step.

Installation (Installation phase) 

This is the installation phase, where the attacker installs a persistent backdoor to maintain access to the target for an extended period of time. 

Persistent backdoors are backdoors that can survive a reboot.

Command & Control (Controlling phase)

This is the command & control phase, where the attacker has the ability to remotely control the victim's machine through command channels. 

Actions on objectives (The goal of the attacker)

This is the objectives phase, where the attacker has successfully gained control over the victim's system. 

Whatever happens next depends on the ultimate objectives of the attacker, such as privilege escalation, collect and exfiltrate data.]]> 2023-10-19 01:55:32 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753702713 220374261 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753707935 - Conduct a penetration test on the company's file server while excluding the webserver.

- Schedule penetration testing to take place outside regular office or peak hours.

Who Should Be Informed:

- 'Whitebox': Ensure that penetration testing is transparent and known to all parties involved.

- 'Blackbox': Simulate a genuine attack scenario without prior knowledge, such as executing a social engineering attack on a helpdesk agent to obtain a password reset.

]]> 2023-10-19 01:59:06 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753707935 22032047_3 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753708363 1. Meeting compliance
2. Maintaining confidentiality, revenue and goodwill
3. Maintaining confidentiality, revenue and goodwill
4. Security training for network staff
5. Testing new technology implementation]]> 2023-10-19 01:59:22 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753708363 22032047_3 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753709203 Pen testing aims to identify vulnerabilities and risks in the system which may impact the confidentiality, integrity, and availability of the data by emulating a real DDoS attack.]]> 2023-10-19 02:00:01 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753709203 220374261 https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753710196

Red Team: Comprised of ethical hackers, this group assesses an organization's security defenses by simulating attacks. Essentially, they act as penetration testers.

Blue Team: The cybersecurity defense unit responsible for identifying and responding to the red team's attacks. They employ measures like intrusion detection systems, firewalls, and honeypots to counter or disrupt the attackers.

Green Team: Legitimate users within the organization's network and IT system who are often targeted by the red team for different purposes.

]]> 2023-10-19 02:00:45 UTC https://padlet.com/22032047_3/j0a729if5o2b29r1/wish/2753710196