DevHackersBlog

Information Gathering is a phase in which we attempt to gather information regarding the target we are attempting to break into. The information can be open ports, services running, applications like unauthenticated administrative consoles or those with default passwords. I did like to quote Abraham Lincoln - "Give me 6 hours to chop down the tree and I will spend the first four sharpening the axe". In simple words, the more information we gather about the target, the more it will be beneficial to us, as there will be more attack surface available to us. Assume that you want to break into your neighbour's house. You will probably inspect the varied locks they use before breaking-in, this will ensure that you an check the ways to break that lock beforehand. Similarly, when doing a web application assessment, we need to explore all the possibilities of breaking into the web application, because the more information we can gather about the target, the greater chance we...