Cybersecurity: Footprinting, Scanning, Enumeration, and Obfuscation Tools

Running head: CYERSECURITY
CYERSECURITY
Name of the Student
Name of the University
Author Note

1
CYBERSECURITY
Table of Contents
Answer of Question number 1.........................................................................................................3
Footprinting.....................................................................................................................................3
Publicly Available Information...................................................................................................3
Answer of Question number 2.........................................................................................................4
Scanning..........................................................................................................................................4
SYN Scanning.............................................................................................................................5
UDP Scanning.............................................................................................................................5
ACK scanning..............................................................................................................................5
Window Scanning........................................................................................................................5
Answer of Question number 3.........................................................................................................5
Enumeration.....................................................................................................................................5
Nessus Scanning countermeasures..............................................................................................5
Nmap NSE Scripting...................................................................................................................6
Basic Banner Grabbing................................................................................................................6
Answer of Question Number 4........................................................................................................6
Case study of an Attack scenario.....................................................................................................6
Answer of question number 5..........................................................................................................8
Obfuscation Tools............................................................................................................................8
Reference.........................................................................................................................................9

2
CYBERSECURITY

3
CYBERSECURITY
Answer of Question number 1
Footprinting
Whenever browsing or using internet, without user acknowledgement a huge amount of
information is publicly available such as location details, visited website links and employee
informations of companies. To check potential security exposures and what are the information
hackers can access a technique can be used called Footprinting to generate a broad profile of an
organization’s security posture and prevent exploitation (Aviad, Węcel and Abramowicz 2013).
Type of
Footprinting
Sections Control and remove publicly
Available Information
Internet Network locks and subnets, TCP and
UDP
1. Determination of certain
subsidiaries.
2. Proper authorization.
3. Check publicly available
information.
4. WHOIS and DNS Enumeration.
5. DNS interrogation.
6. Network Reconnaissance.
Intranet Internal domain names, Network
protocols
Remote Access VPNs, Telephone Numbers
Extranet Type of connection, Domain names
Publicly Available Information
Sources Explanation Guidance