Staf of EC-Council - Ethical Hacking Student Courseware. Certidied Ethical Hacker-Exam 312-50 (EC-Council E-Business Certification Series)

Introduction

This module attempts to bridge various aspects of ethical hacking by suggesting an approach for undertaking penetration testing. There are different ways of approaching a penetration test.

• External Approach

  • With some prior knowledge

  • Without prior knowledge

• Internal Approach

  • With some prior knowledge

  • With deep knowledge

Whatever the approach adopted, it is a fact that penetration testing is constrained by time and availability of resources, which varies from client to client. To effectively utilize both these telling factors, penetration testers adopt some form of structure or methodology. These can be checklists developed by consulting practices, widely available resources such as Open Source Security Testing Methodology or a customized attack strategy.

There are is no single set of methodology that can be adopted across client organizations. The skeletal frame of testing however is more or less similar. The terms of reference used for various phases may differ , but the essence is the same. As discussed in preceding modules, the test begins with:

• Footprinting / Information Gathering phase

• Discovery and Planning / Information Analysis phase

• Detecting a vulnerability / security loophole

• Attack / Penetration / Compromise

• Analysis of security posture / Cover up / Report

• Clean up

The general objective of a penetration test is to reveal where security fails. The result of a penetration test can be:

• successful attack - when the objective is met within the scope of the attack

• a partial success - when there has been a compromise, but not enough to achieve the objective

• a failure - when the systems have been found to be robust to the attack methodology adopted

Foot printing / Information Gathering phase:

• Client site intelligence

• Infrastructure fingerprinting

• Network discovery and Access point discovery

Discovery and Planning / Information Analysis phase

• Target Identification

• Resource and Effort Estimation

• Modeling the Attack strategy (s)

• Relationship Analysis

Detecting a vulnerability / security loophole

• Vulnerability Analysis

• Scanning

• Enumeration

• Zeroing the target

Attack / Penetration / Compromise

• Exploring viable exploits (new / created / present)

• Executing the attack / Alternate attack strategy

• Target penetration

• Escalating the attack

Analysis of security posture / Cover up / Report

• Consolidation of attack information

• Analysis and recommendations

• Presentation and deliverables

Clean up

• Clean up tasks and procedures

• Restoring security posture