Metodologia da Penetração de sistemas

• 1 1Penetration Testing Methodology
  
  • 1.1 1.1PHASE – I: PLANNING AND PREPARATION
  • 1.2 1.2PHASE – II: ASSESSMENT
  • 1.3 1.2.1Information Gathering
  • 1.4 1.2.2Network Mapping
  • 1.5 1.2.3Vulnerability Identification
  • 1.6 1.2.4Penetration
  • 1.7 1.2.5Gaining Access and Privilege Escalation
    
    • 1.7.1 1.2.5.1Gaining Access
      
      • 1.7.1.1 1.2.5.1.1Gain Least Privilege
      • 1.7.1.2 1.2.5.1.2Compromise
      • 1.7.1.3 1.2.5.1.3Final Compromise on Target
    • 1.7.2 1.2.5.2Privilege Escalation
  • 1.8 1.2.6Enumerating Further
  • 1.9 1.2.7Compromise Remote Users/Sites
  • 1.10 1.2.8Maintaining Access
    
    • 1.10.1 1.2.8.1Covert Channels
    • 1.10.2 1.2.8.2Backdoors
    • 1.10.3 1.2.8.3Root-kits
  • 1.11 1.2.9Cover the Tracks
    
    • 1.11.1 1.2.9.1Hide Files
    • 1.11.2 1.2.9.2Clear Logs
    • 1.11.3 1.2.9.3Defeat integrity checking
    • 1.11.4 1.2.9.4Defeat Anti-virus
    • 1.11.5 1.2.9.5Implement Root-kits
  • 1.12 Audit (optional)
  • 1.13 1.3PHASE – III: REPORTING, CLEAN UP & DESTROY ARTIFACTS
  • 1.14 1.3.1Reporting
  • 1.15 1.3.1.1Verbal Reporting
  • 1.16 1.3.1.2Final Reporting
  • 1.17 1.3.2Clean Up and Destroy Artifacts
  •  
  • Fonte