The Five Stages of Ethical Hacking

Posted by Sharan R On 12:30 AM

Phases of hacking 

Phase 1—Reconnaissance
Phase 2—Scanning
Phase 3—Gaining Access
Phase 4—Maintaining Access
Phase 5—Covering Tracks

Phase 1: Passive and Active Reconnaissance
Passive reconnaissance involves gathering information regarding a potential target without
the targeted individual’s or company’s knowledge. Passive reconnaissance can be as simple as
watching a building to identify what time employees enter the building and when they leave.
However, it’s usually done using Internet searches or by Googling an individual or company
to gain information. This process is generally called information gathering. Social engineering and dumpster diving are also considered passive information-gathering methods.
 
Sniffing the network is another means of passive reconnaissance and can yield useful information
such as IP address ranges, naming conventions, hidden servers or networks, and other
available services on the system or network. Sniffing network traffic is similar to building
monitoring: A hacker watches the flow of data to see what time certain transactions take place
and where the traffic is going.

Active reconnaissance involves probing the network to discover individual hosts, IP addresses,
and services on the network. This usually involves more risk of detection than passive reconnaissance
and is sometimes called rattling the doorknobs. Active reconnaissance can give a hacker an
indication of security measures in place (is the front door locked?), but the process also increases
the chance of being caught or at least raising suspicion.

Both passive and active reconnaissance can lead to the discovery of useful information to
use in an attack. For example, it’s usually easy to find the type of web server and the operating
system (OS) version number that a company is using. This information may enable a hacker
to find a vulnerability in that OS version and exploit the vulnerability to gain more access.
 
Phase 2: Scanning
Scanning
involves taking the information discovered during reconnaissance and using it to
examine the network. Tools that a hacker may employ during the scanning phase can include
dialers, port scanners, network mappers, sweepers, and vulnerability scanners. Hackers are
seeking any information that can help them perpetrate attack such as computer names, IP
addresses, and user accounts.

Phase 3: Gaining Access 
This is the phase where the real hacking takes place. Vulnerabilities discovered during the reconnaissance and scanning phase are now exploited to gain access. The method of connection the hacker uses for an exploit can be a local area network (LAN, either wired or wireless), local access to a PC, the Internet, or offline. Examples include stack-based buffer overflows, denial of service (DoS), and session hijacking. These topics will be discussed in later chapters. Gaining access is known in the hacker world as owning the system.

Phase 4: Maintaining Access
Once a hacker has gained access, they want to keep that access for future exploitation and
attacks. Sometimes, hackers harden the system from other hackers or security personnel by
securing their exclusive access with backdoors, rootkits, and Trojans. Once the hacker owns
the system, they can use it as a base to launch additional attacks. In this case, the owned system
is sometimes referred to as a zombie system.
 
Phase 5: Covering Tracks
Once hackers have been able to gain and maintain access, they cover their tracks to avoid
detection by security personnel, to continue to use the owned system, to remove evidence of
hacking, or to avoid legal action. Hackers try to remove all traces of the attack, such as log files
or intrusion detection system (IDS) alarms. Examples of activities during this phase of the
attack include steganography, the use of tunneling protocols, and altering log files.

83 comments

  1. Anonymous Said,

    Online Cisco Training, Online Linux Training, Online Ethical Hacking Training, Online CCNP Training, Online CCNA Training, Online MCSE Training, Online CCIE Training India, MCITP Training, Online VMware Training and more offered by Zoom Technologies by highly proficient CISCO certified experts - Hyderabad, India.

    Posted on April 23, 2014 at 10:43 AM

     
  2. Cindy Dy Said,


    This is really an interesting topic. I had a great time surfing and found some important tips and information from your blog. Keep it up.

    Bob
    www.gofastek.com

    Posted on December 9, 2015 at 12:58 AM

     
  3. sarah lee Said,

    I really enjoyed reading your article. I found this as an informative and interesting post, so i think it is very useful and knowledgeable. I would like to thank you for the effort you have made in writing this article.


    edupdf.org

    Posted on January 12, 2016 at 6:46 PM

     
  4. Naveen Yadav Said,

    Ethical hacking Training very fruitful to Every Computer user for Security reasons. Nice blog and very well written.

    Posted on February 2, 2017 at 2:25 AM

     
  5. Thank you for sharing. If you can more read now visit
    Ethical Hacking Training in India
    EC-Council Certification Course in Delhi NCR

    Posted on March 27, 2017 at 2:01 AM

     
  6. Thanks for sharing.
    Learn how to hack.
    http://www.ethicalhackingpremium.ga

    Posted on May 17, 2017 at 3:08 AM

     
  7. Priya Kannan Said,

    Pretty section of content. I simply stumbled upon your site and in accession capital to say that I get actually loved to account your blog posts.
    CCNA Training in Chennai

    Posted on June 28, 2017 at 12:04 AM

     
  8. Naveen Yadav Said,

    Very Nice blog . Thanks for sharing.

    CEH Training in Delhi NCR
    http://www.ssdntech.com/certified-ethical-hacker-training.aspx

    Posted on January 7, 2018 at 10:59 PM

     
  9. Shailendra Said,

    Hooray ! Blog is very helpful for me. I Like it, Thanks for Sharing great content.
    Ethical Hacking Training in Gurgaon
    Ethical Hacking Institute in Gurgaon
    Ethical Hacking Course in Gurgaon

    Posted on February 13, 2018 at 10:24 PM

     
  10. Mahesh Said,

    Thanks, Learned a lot of new things from your post! Good creation and HATS OFF to the creativity of your mind.
    Very interesting and useful blog!
    Ethical Hacking Course in Gurgaon

    Posted on February 17, 2018 at 1:42 AM

     
  11. Unknown Said,

    This blog awesome and i learn a lot about programming from here.The best thing about this blog is that you doing from beginning to experts level.
    Visit: Best Ethical Hacking Course

    Posted on February 27, 2018 at 5:05 AM

     
  12. Jimmy loof Said,

    I have been living with my wife for some years now,i was afraid she has been cheating on me and a friend of mine introduced me to a Private Investigator (Mr Raymond), he helped me and gave me the password to her Facebook and Gmail account and also linked all her phone conversations to me.He saved me from all her lies and infidelity,he gave me all i wanted during our divorce and helped me with evidence in court.his services was cheap,and he was so reliable. I just ,want to openly say thank you.Contact (Gadgethacksolution@gmail.com) .tell him i referred you he will help you

    Posted on March 11, 2018 at 3:58 AM

     
  13. Monika Singh Said,

    croma campus one of the best Ethical Hacking Training in Delhi and real time trainer with job placement support. More details visit at croma campus

    Posted on March 20, 2018 at 2:01 AM

     
  14. excellent piece of information,I do believe all of the concepts you’ve introduced in your post. They’re very convincing and will definitely work. Nonetheless, the posts are too short for novices. May you please extend them a bit from subsequent time. Thank you for the post. Tools is the top most section of the Ethical hacking exam and the most scoring of the sub-sections of the examination. This section of the exam is going to test the expertise on the tools, systems and the programs used by the hackers.

    Posted on April 13, 2018 at 3:49 AM

     
  15. Kritika Said,

    Thanks for posting such amazing post. Well explained. Keep sharing
    Ethical Hacking course in Delhi

    Posted on April 16, 2018 at 12:44 AM

     
  16. Admin Said,

    Beautiful Post..It is beneficially
    Visit: Ethical Hacking Course In Jaipur

    Posted on April 19, 2018 at 8:43 AM

     
  17. Nice Article! Indian Cyber Army's is now coming up with Summer Internship in cyber crime investigation and ethical hacking which is is live now

    Posted on May 24, 2018 at 6:02 AM

     
  18. Nice Article! Indian Cyber Army's is now coming up with Summer Internship in cyber crime investigation and ethical hacking which is is live now

    Posted on May 24, 2018 at 6:02 AM

     
  19. R@tK@K@ Said,

    Ethical Hacking has gained tremendous popularity in the recent times because protecting data from harm is vital for all organizations. There are several companies across India which require ethical hackers. If you live near or in Delhi, then worry not. There are several institutes which provide ethical hacking course in Delhi.

    Posted on June 18, 2018 at 10:08 PM

     
  20. Mahesh Shiva Said,

    Its a wonderful post and very helpful, thanks for all this information.
    Ethical Hacking Training in Delhi

    Posted on June 18, 2018 at 11:00 PM

     
  21. Harish Said,

    It’s a great post. Keep sharing this kind of worthy information. Good luck!

    Salesforce Developer Training in Chennai | Salesforce Training in Chennai

    Posted on June 20, 2018 at 5:49 AM

     
  22. Rajiv Singh Said,

    Such a excellent line are written by author. Career with Ethical Hacking course give the new dimension for you bright future.

    Posted on June 22, 2018 at 12:59 AM

     
  23. cyber news Said,

    nice post.thanks for sharing the more valuable information.
    Indian Cyber Army credibility in Ethical hacking training & Cybercrime investigation training is acknowledged across nation as we offer hands on practical knowledge and full assistance with basic as well as advanced level ethical hacking & cybercrime investigation courses. The training is conducted by subject specialist corporate professionals with wide experience in managing real-time ethical hacking/ cyber security projects. Indian Cyber Army implements a blend of academic learning and practical sessions to give the candidate optimum exposure.Ethical hacking training ,
    Ethical hacking course

    Posted on June 27, 2018 at 11:49 PM

     
  24. This comment has been removed by the author.

    Posted on July 16, 2018 at 6:03 AM

     
  25. Superb explanation! I found everything I was looking for. Thanks for being such a great resource! Best Dentist in Jaipur

    Posted on July 16, 2018 at 6:04 AM

     
  26. EHE

    Posted on August 5, 2018 at 11:18 PM

     
  27. soumya Teja Said,

    This comment has been removed by the author.

    Posted on August 16, 2018 at 12:12 AM

     
  28. soumya Teja Said,

    This comment has been removed by the author.

    Posted on August 21, 2018 at 4:20 AM

     
  29. R@tK@K@ Said,

    Ethical Hacking is the order of the day and protecting your data from harm is getting a widespread importance. If you live near or in Delhi, then worry not. There are several institutes which provide ethical hacking course in Delhi.

    Posted on September 26, 2018 at 2:31 AM

     
  30. bhanu pratap Said,

    Really Nice Information..thanks for sharing the valuable content. Best software Training institute in Bangalore

    Posted on October 1, 2018 at 2:16 AM

     
  31. Hey Nice Blog!! Thanks For Sharing!!!Wonderful blog & good post.Its really helpful for me, waiting for a more new post. Keep Blogging!
    networking training
    ccna Training

    Posted on October 29, 2018 at 11:11 PM

     

  32. Thanks for sharing information to us. If someone want to know more about Ethical Hacking. I think this is the right place for you!

    Ethical Hacking
    ceh Training

    Posted on October 30, 2018 at 12:33 AM

     
  33. Posted on October 30, 2018 at 4:54 AM

     
  34. Posted on November 1, 2018 at 11:39 PM

     
  35. Unknown Said,

    Posted on November 2, 2018 at 5:01 AM

     
  36. Good job in presenting the correct content with the clear explanation. The content looks real with valid information. Good Work

    DevOps is currently a popular model currently organizations all over the world moving towards to it. Your post gave a clear idea about knowing the DevOps model and its importance.

    Good to learn about DevOps at this time.


    devops training in chennai | devops training in chennai with placement | devops training in chennai omr | devops training in velachery | devops training in chennai tambaram | devops institutes in chennai | devops certification in chennai | trending technologies list 2018

    Posted on November 9, 2018 at 10:21 PM

     
  37. Posted on November 30, 2018 at 10:22 PM

     
  38. sathyaramesh Said,

    Thank you for taking the time and sharing this information with us. It was indeed very helpful and insightful while being straight forward and to the point.
    Big Data Course in Chennai
    Big Data Hadoop Training in Chennai
    Hadoop Course in Chennai
    CCNA Training Chennai
    CCNA Training institutes in Chennai
    CCNA Training near me

    Posted on December 2, 2018 at 10:12 PM

     
  39. Thank you for taking the time and sharing this information with us. Keep posting like this..
    Great work keep it up.. keep bloging like this..
    Python Training in Jaipur

    Hadoop Training in Jaipur

    Software Testing training in Jaipur

    MVC Training in Jaipur

    Adobe Photoshop Training in Jaipur

    NETWORKING Training In Jaipur

    Posted on December 8, 2018 at 12:19 AM

     
  40. Thank you for sharing wonderful information with us to get some idea about that content. check it once through
    Machine Learning With TensorFlow Training and Course in Tel Aviv
    | CPHQ Online Training in Beirut. Get Certified Online

    Posted on December 16, 2018 at 10:08 PM

     
  41. Kayal m Said,

    It's very good post, thanks for your sharing with as. I want more ideas from your blog. I am waiting for your great post.....
    CCNA Institute in Bangalore
    CCNA Training institutes in Bangalore
    CCNA Certification in Bangalore
    CCNA Training in Chennai Velachery
    CCNA Course in Vadapalani
    CCNA Training in Nungambakkam

    Posted on December 17, 2018 at 12:50 AM

     
  42. sathyaramesh Said,

    I am obliged to you for sharing this piece of information here and updating us with your resourceful guidance. Hope this might benefit many learners. Keep sharing this gainful articles and continue updating us.
    Java Classes in Chennai | Core Java Training in Chennai
    java coaching classes in madurai | java classes in madurai
    java training centers in coimbatore | java training coimbatore
    Java Course in Bangalore | Java Training Institutes in Bangalore

    Posted on December 17, 2018 at 10:14 PM

     
  43. sumathi s Said,

    Appreciating the persistence, you put into your blog and detailed information you provide.
    offshore safety course in chennai

    Posted on December 18, 2018 at 11:20 PM

     
  44. Swetha Gauri Said,

    This is an awesome post. Really very informative and creative contents. These concept is a good way to enhance the knowledge. I like it and help me to development very well.
    occupational health and safety course in chennai

    Posted on December 19, 2018 at 1:31 AM

     
  45. Priya Said,

    Needed to compose you a very little word to thank you yet again regarding the nice suggestions you’ve contributed here
    Best Tally Training Institute in delhi
    Tally Guru & GST Law course in Delhi

    Tally Pro & GST Law course in Delhi

    pmkvy course in Delhi
    Latest updation On GST for Tally in Delhi

    Posted on December 20, 2018 at 10:51 PM

     
  46. cloud ace Said,

    Nice post. By reading your blog, i get inspired and this provides some useful information. Thank you for posting this exclusive post for our vision....

    data science online training
    sas online training
    linux online training
    aws online training
    testing tools online training
    devops online training
    salesforce online training

    Posted on December 21, 2018 at 7:30 AM

     
  47. Hey, very nice site. I came across this on Google, and I am stoked that I did. I will definitely be coming back here more often. Wish I could add to the conversation and bring a bit more to the table, but am just taking in as much info as I can at the moment. Thanks for sharing.

    Custom Web Application Development

    Posted on December 28, 2018 at 4:56 AM

     
  48. Posted on January 2, 2019 at 8:36 PM

     
  49. Bannu Babu Said,

    Nice Article ..Thanks for providing information that was worth reading & sharing
    ielts coaching in Hyderabad
    Machine Learning Course in Hyderabad
    Power bi training Hyderabad
    Python training in Hyderabad

    Posted on January 3, 2019 at 2:25 AM

     
  50. Posted on January 3, 2019 at 4:21 AM

     
  51. Posted on January 7, 2019 at 4:57 AM

     
  52. mani Said,

    Posted on January 7, 2019 at 8:00 AM

     
  53. SAHASRA R Said,

    This comment has been removed by the author.

    Posted on January 8, 2019 at 10:27 AM

     
  54. SAHASRA R Said,

    Posted on January 8, 2019 at 10:29 AM

     
  55. Training Said,

    Posted on January 8, 2019 at 8:51 PM

     
  56. digitalmrk Said,

    Posted on January 8, 2019 at 10:16 PM

     
  57. Shaikfarha Said,

    Posted on January 9, 2019 at 2:18 AM

     
  58. The best Article that I have never seen before with useful content and very informative.Thanks for sharing info.

    Social Media Marketing Training in Hyderabad

    Adwords Training in Hyderabad

    Google Analytics Training in Hyderabad

    Google AdSense Training in Hyderabad

    Posted on January 9, 2019 at 4:15 AM

     
  59. ajay prakash Said,

    Posted on January 10, 2019 at 10:50 PM

     
  60. IswaryaSeo Said,

    I have completely read your post and the content is crisp and clear. Thank you for posting such an informative article, I have decided to follow your blog so that I can myself updated
    Java training in chennai |Tally training center in chennai

    Posted on January 13, 2019 at 10:10 PM

     
  61. Posted on January 16, 2019 at 1:40 AM

     
  62. Posted on January 20, 2019 at 6:06 AM

     
  63. ptiacademy Said,

    This comment has been removed by the author.

    Posted on January 29, 2019 at 12:01 AM

     
  64. Posted on January 31, 2019 at 2:21 AM

     
  65. anusha Said,


    Full Stack Development Training in Chennai Searching for Full Stack Development training in chennai ? Bita Academy is the No 1 Training Institute in Chennai. Call for more details.data science training in chennai

    Posted on February 1, 2019 at 11:47 AM

     
  66. I am obliged to you for sharing this piece of information here and updating us with your resourceful guidance. Hope this might benefit many learners. Keep sharing this gainful articles and continue updating us.

    Php Institute in Gurgaon
    Php Course in Gurgaon
    Php Training in Gurgaon
    Java Institute in Gurgaon
    Java Course in Gurgaon
    Java Training in Gurgaon
    C++ Institute in Gurgaon
    C++ Course in Gurgaon
    C++ Training in Gurgaon

    Posted on February 10, 2019 at 7:15 PM

     
  67. Succeeding in a job as a data scientist is very simple if you possess the right set of skills and follow the right approach. With the right training, no one can stop you from getting a job as a data scientist which, besides being challenging, is highly lucrative.

    Data Science Course in Hyderabad

    Posted on February 12, 2019 at 8:46 PM

     
  68. Nice post. Thanks for sharing! I want people to know just how good this information is in your article. It’s interesting content and Great work.
    Thanks & Regards,
    VRIT Professionals,
    No.1 Leading Web Designing Training Institute In Chennai.

    And also those who are looking for
    Web Designing Training Institute in Chennai
    SEO Training Institute in Chennai
    Photoshop Training Institute in Chennai
    PHP & Mysql Training Institute in Chennai
    Android Training Institute in Chennai

    Posted on February 25, 2019 at 9:42 PM

     
  69. Shailendra Said,

    Good blog. I like your blog. Thanks for Sharing
    Ethical Hacking Training in Gurgaon

    Posted on March 7, 2019 at 4:52 AM

     
  70. shivani Said,

    Astonishing web diary I visit this blog it's incredibly magnificent. Strangely, in this blog content made doubtlessly and sensible. The substance of information is instructive.
    Oracle Fusion Financials Online Training
    Oracle Fusion HCM Online Training
    Oracle Fusion SCM Online Training

    Posted on March 11, 2019 at 12:53 AM

     
  71. anisha singh Said,

    Nice article thanks for given this information. I hope it useful to many People
    Python Training in Gurgaon

    Python Training institute in Gurgaon

    Posted on March 13, 2019 at 3:15 AM

     
  72. shivani Said,

    Amazing web journal I visit this blog it's extremely marvelous. Interestingly, in this blog content composed plainly and reasonable. The substance of data is educational.
    Oracle Fusion Financials Online Training
    Oracle Fusion HCM Online Training
    Oracle Fusion SCM Online Training

    Posted on March 15, 2019 at 6:02 AM

     
  73. Unknown Said,

    Posted on March 15, 2019 at 6:40 AM

     
  74. shivani Said,

    An amazing web journal I visit this blog, it's unbelievably wonderful. Oddly, in this blog's content made without a doubt and reasonable. The substance of data is informative.
    Oracle Fusion Financials Online Training
    Oracle Fusion HCM Online Training
    Oracle Fusion SCM Online Training
    oracle Fusion Technical online training

    Posted on March 20, 2019 at 4:22 AM

     
  75. yashnit Said,

    Thanks For Sharing The Information The Information Shared Is Very Valuable Please Keep Updating Us Time Just Went On Reading The article Python Online Course Hadoop Online Course Aws Online Course Data Science Online Course

    Posted on March 29, 2019 at 3:45 AM

     
  76. I am really happy to read your blog. your blog is very good and informative for me.
    Your blog contain lots of information. It's such a nice post. I found your blog through my friend if you want to know about more property related information please check out here. With the experience of over 3 decades, Agrawal Construction Company is the biggest and the best builders in bhopal and the trust holder of over 10000 families. Agrawal Construction Company Bhopal is serving society, building trust & quality with a commitment to cutting-edge design and technology. Agrawal Construction Company's vision is to 'building trust & quality' which extends to developing residential, commercial and township projects in all the directions of the beautiful City of Lakes Bhopal and hence it is among the top builders in Bhopal. Currently, it has four residential such as Sagar Pearl, Sagar Green Hills, Sagar Landmark and Sagar Eden Garden.










    Posted on April 1, 2019 at 1:06 AM

     
  77. Eiliza45 Said,

    I love this post.

    โปรโมชั่นGclub ของทางทีมงานตอนนี้แจกฟรีโบนัส 50%
    เพียงแค่คุณสมัคร Gclub กับทางทีมงานของเราเพียงเท่านั้น
    ร่วมมาเป็นส่วนหนึ่งกับเว็บไซต์คาสิโนออนไลน์ของเราได้เลยค่ะ
    สมัครสมาชิกที่นี่ >>> Gclub online

    Posted on April 3, 2019 at 11:22 PM

     
  78. lggy1688 Said,

    Very cool!

    เว็บไซต์คาสิโนออนไลน์ที่ได้คุณภาพอับดับ 1 ของประเทศ
    เป็นเว็บไซต์การพนันออนไลน์ที่มีคนมา สมัคร Gclub Royal1688
    และยังมีเกมส์สล็อตออนไลน์ 1688 slot อีกมากมายให้คุณได้ลอง
    สมัครสมาชิกที่นี่ >>> Gclub Royal1688

    Posted on April 3, 2019 at 11:27 PM

     
  79. anirudh Said,


    I like your post very much. It is very much useful for my research. I hope you to share more info about this. Keep posting!! Best DevOps Training Institute

    Posted on April 4, 2019 at 3:30 AM

     
  80. bhanupratap Said,

    Thank your valuable content.we are very thankful to you.one of the recommended blog.which is very useful to new learners and professionals.content is very useful for hadoop learners


    Best ASP.NET MVC Online Training Institute
    Best Spring Online Training Institute
    Best Devops Online Training Institute
    Best Datascience Online Training Institute
    Best Oracle Online Training Institute
    Best AWS Online Training Institute
    Best AngularJS Online Training Institute

    Posted on April 9, 2019 at 3:43 AM

     
  81. shivani Said,

    A bewildering web journal I visit this blog, it's unfathomably heavenly. Oddly, in this present blog's substance made purpose of actuality and reasonable. The substance of data is informative
    Oracle Fusion Financials Online Training
    Oracle Fusion HCM Online Training
    Oracle Fusion SCM Online Training

    Posted on April 9, 2019 at 3:57 AM

     
  82. Cloud Computing is one of the best course through which your carrer will shine. Get the best knowledge of Cloud Computing Training Course in Delhi for more queries just click the mentioned link.
    Cloud Computing Course in Delhi

    Posted on April 19, 2019 at 12:14 AM

     
  83. shivani Said,

    A befuddling web diary I visit this blog, it's incredibly grand. Strangely, in this present blog's substance made motivation behind fact and sensible. The substance of information is instructive
    Oracle Fusion Financials Online Training
    Oracle Fusion HCM Online Training
    Oracle Fusion SCM Online Training

    Posted on April 22, 2019 at 5:22 AM