Scouting the Site
Before you can adequately define potential holes in your site's security, you have to scout the site to find as much information as possible. This section discusses two different types of information gathering. The first type deals with gathering information on a host you have local access to. The second details how to gather information about a site based on what is available on the network. This is more suited to a remote attack but can help leverage a local attack as well.
Local
Local information gathering may or may not be possible in your organization, depending on the situation. A dedicated attacker will attempt it, and this means you might want to take a stab at it as well. Examine any public computing facilities at your ...
Get Microsoft® Windows® 2000 Security Handbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
