Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Securing Network Infrastructure

You're reading from   Securing Network Infrastructure Discover practical network security with Nmap and Nessus 7

Arrow left icon
Product type Course
Published in Mar 2019
Publisher
ISBN-13 9781838642303
Length 538 pages
Edition 1st Edition
Tools
Arrow right icon
Authors (2):
Arrow left icon
Sairam Jetty Sairam Jetty
Author Profile Icon Sairam Jetty
Sairam Jetty
Sagar Rahalkar Sagar Rahalkar
Author Profile Icon Sagar Rahalkar
Sagar Rahalkar
Arrow right icon
View More author details
Toc

Table of Contents (28) Chapters Close

Title Page
Copyright and Credits
About Packt
Contributors
Preface
1. Introduction to Network Vulnerability Scanning FREE CHAPTER 2. Understanding Network Scanning Tools 3. Port Scanning 4. Vulnerability Scanning 5. Configuration Audits 6. Report Analysis and Confirmation 7. Understanding the Customization and Optimization of Nessus and Nmap 8. Network Scanning for IoT, SCADA/ICS 9. Vulnerability Management Governance 10. Setting Up the Assessment Environment 11. Security Assessment Prerequisites 12. Information Gathering 13. Enumeration and Vulnerability Assessment 14. Gaining Network Access 15. Assessing Web Application Security 16. Privilege Escalation 17. Maintaining Access and Clearing Tracks 18. Vulnerability Scoring 19. Threat Modeling 20. Patching and Security Hardening 21. Vulnerability Reporting and Metrics 1. Other Books You May Enjoy Index

Active information gathering


Unlike passive information gathering, which involves an intermediate system for gathering information, active information gathering involves a direct connection with the target. The client probes for information directly with the target with no intermediate system in between. While this technique may reveal much more information than passive information gathering, there's always a chance of security alarms going off on the target system. Since there's a direct connection with the target system, all the information requests would be logged and can later be traced back to the source. The following diagram depicts active information gathering where the client is directly probing the target system:

Active information gathering with SPARTA

SPARTA is an excellent active information gathering tool. It is part of the default Kali setup. The following screenshot shows the home screen of SPARTA. In the left pane, you can simply add the IP/host you want to probe:

Upon feeding...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at R$50/month. Cancel anytime