- War Dialing is used to dial a large amount of phone numbers to try to locate systems connected to a modem. If the scan gets a response, it accepts the connection, giving you an access point into the network.
- A stealth scan only sends a SYN packet to a port, so no security log is made on the target computer showing that it was scanned.
- If you type telnet followed by an IP address and port number, you could receive a response that can give you information about the targets system.
- You need to make decisions about how you want to do your scans as an ethical hacker, such as time of day, scans to use, etc.
- You need to use different techniques to scan if your attempts are being blocked by a firewall.
- Have companies do regular vulnerability scans.
- Preventing banner grabbing is as easy as disabling them.
The article was about a company that makes vinyl covers. They had a data breach relating to their customers. The company is called Slickwraps. Customer's names, email address, and addresses were compromised. A security researcher had been warning this company for several days about a massive vulnerability on their website. They ignored him and even blocked his account. An ethical hacker used this vulnerability to send out a mass warning email to all the customers about this breach. The culprit wasn't found.
https://www.engadget.com/2020/02/21/slickwraps-data-breach/
No comments:
Post a Comment