Active recon (or an active attack) is a type of reconnaissance during which the tester communicates with the target server/system either from their own system or via a pre-owned Virtual Private Server (VPS). In this chapter, we will look at some of the ways we can use the built-in scripts in Metasploit to perform both active and passive recon.
Active reconnaissance
Banner grabbing
Banner grabbing is a technique used to gain information about a device on a network, such as the operating system, services running on the open ports, the application used, or the version number. It is part of the information-gathering phase. Metasploit has a lot of modules that can be used to collect banners from different types of services.
In...