Chapter 3. Scanning and Enumeration
Step with me, dear reader, into a virtual movie theater, and let’s imagine we’re going to watch a movie about a guy beginning a career in ethical hacking. At some point, probably during the previews for Deadpool and Wolverine, someone’s cell phone rings, and we all momentarily flash with unbridled rage before going back to the screen. The opening credits roll, showing us that this is a story about a young man deciding to put his hacker training to use. In the first scenes he’s researching vulnerabilities and keeping track of the latest news, checking on websites, and playing with tools in his secret lab. Soon thereafter, he gets his first break and signs a contract to test a client—a client holding a secret that could change the very fabric of modern society.
Before we’re even halfway through the buttered popcorn, our hero has completed some footprinting work and has tons of information on potential targets. Some of what he finds seems harmless enough, while some is so bizarre he’s not really sure what it even is. He leans in, looking at the multitude of monitors all around him (while foreboding music pulls us all to the edge of our seats). The camera zooms in for a close-up, showing his eyes widening in wonder. The music reaches a crescendo as he says, “OK…so what do I do now?”
Welcome to scanning and enumeration, where you learn what to do with all those targets you identified in the last chapter. You know how to footprint your client; now ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access