Session PHASES OF HACKING

PHASES OF HACKING
==================

There are particular 5 Phases which depicts how to gain access to a particular system. these are

VAPT - VULNERABILITY ASSESSMENT
		PENETRATION TESTING


1. INFORMATION GATHERING  - Reconaissance
2. SCANNING - Vulnerability Assessment
3. GAINING ACCESS - EXPLOITATION
4. MAINTAINING ACCESSS
5. COVERING TRACES

Information Gathering + SCanning = Pre Attacking Phase
Gaining Access = Attacking or Exploitation Phase
Maintaining Access + Covering Traces = Post Exploitation Phase

INFORMATION GATHERING OR RECONNAISSANCE
=======================================

Information Gathering is an act where we gather and extract as much information as we can about our victim. The Victim can be a Network, a Machine, A website or a individual. The Information we gather in the Reconnaissance Phase will helps us that which approach to follow for attacking into the Target whether it is a Network, a Web Application or a Individual.
Maximum we know about the Target, Maximum will be the chances of Successful Exploitation.

Need and Motive of Information Gathering
=========================================

We gather information about the victim so that we plan our attack according to the Information gathering report.

TYPES OF INFORMATION GATHERING
===============================

1. WEB BASED INFORMATION GATHERING : It tells us about the services and the identity of the website and its owner related to other details. The information can be about the services of the Website it is using, what are the directories a Web Application is having, Server type whether it is using a Shared Server or a Dedicated Server etc.
TOOLS - https://whois.icann.org/en , https://whois.domaintools.com/

Whether the website is using dedicated server or shared server.

Dedicated Servers are only for those websites of a particular owner.
Shared Servers are those which are sharing multiple websites.
Tool - www.yougetsignal.com

2. NETWORK BASED INFORMATION GATHERING
=======================================
It tells us about the information about the clients and a particular network those clients who are connected. This phase of Information Gathering tells us the IP Addresses and the MAC addresses along with other details like OS, Services they are using and Ports they are using.

Tools - AngryIPScanner , Softperfect Network Scanner, Cain&Able, Nmap etc.

3. INDIVIDUAL INFORMATION GATHERING
===================================
We collect data and information about a specific person which can be of any location. These can be done through multiple tools.

Other ways of Information Gathering
===================================

= Through some Social Networking Sites : facebook , instagram, twitter, gmail+, linkedin - resume, contact details etc.

= Through some Smart Applications : TRuecaller , Hackode etc.

= Through Online Portals : Shaadi.com , Naukri.com, Shine.com, Indeed.com etc.

= Through some fake emails : https://temp-mail.org/ , https://www.guerrillamail.com/inbox

= Through some Tools : Maltego , HTTrack- Website Copier etc.

------------------------------------------------------------------------

Digital Footpriniting
======================
Digital Footprinting is process in which we left some traces and some tracks or in other words "footprints" of ourselves while using some internet servcices and left these traces and tracks on the internet. These information can be transmitted online, such as forum registration, e-mails , uploading videos or digital images etc.
		==============================================
Phases of hacking
-----------------
	These phases are must to follow in order to perform any kind of hacking.
	1. Information Gathering or Reconnassaince  (most crucial part of hacking)
	2. Scanning
	3. Gaining Access
	4. Maintaining Access
	5. Covering Traces /clearing tracks (Logs)





	Information Gathering
------------------------------
	To collect as much Information as possible about the target.
	Information Gathering is divided into further
		1. Network Specific
		2. Target Specific


1. Network Specific :
===================
	To collect the information about the network
			Number Of people Connected
			IP Address allocated to the connected devices
			MAC Address of devices connected etc.
Windows based tools:
1.  Soft Perfect Network Scanner (NetScan)
2.  GFI Languard


Linux based tool:
1. Network Mapper (NMap)
2. Zenmap (GUI of NMap)


2. Target Specific : Gathering informtion about the sources found.
==================
	i. Web site or web application
	ii. Human Specific

Web site or web Application:
===========================
Some crucial information needs to be picked out about the target's website these information can be IP address, Server information, sub domains.

	IP Address:   Ping > "ip address"
	Server Information
		Dedicated or shared
		https://www.yougetsignal.com --> reverse IP DOMAIN CHEKUP
	Database Information
	Name of the registrar
	Technologies
	White list and Black List
			|--> robots.txt

Informational websites :
		https://whois.net/
		https://whois.icann.org/en
		https://mxtoolbox.com/

Human Specific
==============
	Social Network
	Social Networking Websites
		Linkedin
		Twitter
		Facebook
	Dating Websites
	Matrimonial Websites
	Job Portals
	Fake Surveys
	Spy Services

Websites:
	Jantakhoj.com
	pipl



Tools
=====
	Maltego
		It is corporate level information gathering tool. It helps in gathering information about each and every aspect.
		Community Edition ---> Free
			All transformations does not work in free edition.
		https://www.paterva.com/web7/downloads.php