Chapter 1
Engagement Management
Course: Comptia Pentest Pt0 003
Subject: Comptia Pentest Plus
Chapter: Reconnaissance And Enumeration
Reconnaissance and enumeration are crucial phases in cybersecurity, whether for ethical hacking, penetration testing, or threat intelligence gathering. Various tools automate data collection, network scanning, and open-source intelligence (OSINT) gathering, making reconnaissance more efficient.
1. Web-Based and Passive Reconnaissance Tools
Passive reconnaissance involves gathering publicly available information without directly interacting with the target system. This minimizes the risk of detection.
1.1 Wayback Machine
What It Does
Wayback Machine is an online service provided by the Internet Archive that stores historical snapshots of websites. This allows users to view and retrieve previous versions of web pages, even if they have been deleted or modified.
How It Helps in Reconnaissance
- Recovers deleted or hidden pages that may contain sensitive information.
- Tracks changes in software versions by analyzing historical snapshots to identify outdated technologies or plugins that might have security vulnerabilities.
- Finds exposed directories and login pages. If a company had a public admin page but later removed it, an attacker could still retrieve its URL structure from an archived snapshot.