Intelligence gathering is the second step of a penetration test, following the preengagement activities. Your goals during this phase are to gain accurate information about your targets without revealing your presence, learn how the organization operates, and determine the best way in. If you don’t perform these tasks thoroughly, you may miss vulnerable systems and viable attack vectors. It takes time and patience to sort through web pages, perform Google hacking, and map systems to fully understand the infrastructure of a particular target. You’ll also need careful planning, research, and, most importantly, the ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
