Posts tagged with: security

Site Information Gathering

Ok, next assignment from my sensei.
Perform information gathering on these sites..
is2c-dojo.net
is2c-dojo.com
www.spentera.com

Hmm..
after some time scanning, here’s my result :
1. is2c-dojo.net
First of all, I do nslookup in order to know the original IP of the target. By performing this command I also can get Information about the IP block owned by the target.

# nslookup is2c-dojo.net

here’s the result. Continue Reading


My First Information Gathering

Information Gathering is the first step of hacking/pentesting,
Its purpose is to get as much information on the target system by any means.

Information gathering divided into two :
A. Technical
Technical Information gathering use the tools available actively. Technical information gathering also divided into two more :
1. Active Information Gathering
This technique interact with the target system directly (ex. scanning).
2. Passive Information Gathering
This technique doesn’t interact with the target system directly(ex.googling)
B. Non Technical
This kind of information gathering doesn’t involve the tools available actively (ex. social engineering)
Today, my sensei gave an assignment to perform a network and web information gathering at the network 192.168.0.xxx.
With a few knowledge of the tools used in information gathering I perform some test on the network.
So, here’s my result of the information gathering. Continue Reading




Pentest Lab Preparation ~ Installing Windows XP

Okay, lets make some preparation to setup our Penetration Testing Lab.

In this tutorial I use Virtualbox 4.1, Ubuntu-10.04-desktop-i386, Windows XP Professional SP3 and Backtrack 5r1 of course..

Lets get started.

1. Open your Virtualbox


2. Click New
3. The welcome screen will appear, just click “Next”


4. Give the name as you wish. I named this “Windows XP”. Then choose the OS Type. Because we want to Install windows xp first make your choice same as the picture below. After that click “Next” Continue Reading