Reconnaissance

Welcome

At Fields Associates, we specialise in the recovery of the digital “fingerprints” left by the routine use of computers. Even erased files can be recovered and examined, ensuring that you have all the evidence available to support your investigation.

Established in 1999, we have earned an impressive reputation in the detection, analysis and presentation of computer evidence in the broadest range of criminal activities. These include fraud, extortion, data theft, child pornography and Internet abuse.

Our clients include legal firms, international banks, blue chip companies, law enforcement and military organisations.

ISO Certified

Penetration Testing Steps

Step 1 - Reconnaissance

The first and foremost step for a penetration test is reconnaissance. The main objective is to gather information about the target system which can be used in a malicious manner to gain access to the target systems.

Successful reconnaissance can often be successfully achieved through passive steps such as social engineering. Here, the hacker will attempt to ‘probe’ relevant personnel into revealing sensitive information. Unlisted phone numbers, passwords and even sensitive network information are often divulged by unsuspecting employees and managers. Other techniques used include ‘dumpster diving’ where an organization's trash is searched for redundant sensitive information such as passwords.

Active reconnaissance refers to the probing of a network in order to detect possible routes to access. These may include:

  • Accessible hosts
  • Open ports
  • Location of routers
  • OS details
  • Details of services

At the end of this stage an intelligent attack strategy is compiled based upon relevant findings.

Step 2 – Scanning and Enumeration »