The Art of Network Penetration Testing

4 Discovering network vulnerabilities

This chapter covers

• Creating effective password lists
• Brute-force password-guessing attacks
• Discovering patching vulnerabilities
• Discovering web server vulnerabilities

Now that our movie heist crew has finished mapping out all of the entry points leading into their target facility, the next thing they have to do is determine which (if any) are vulnerable to attack. Are there any open windows that somebody forgot to close? Are there any closed windows that somebody forgot to lock? Do the freight/service elevators around the back of the building require the same type of keycard access as the main elevators in the lobby? Who has access to one of those keycards? These and many more are the types of questions ...