The second installment of a six-part penetration testing tutorial for consultants and VARs that discusses three important information gathering processes for penetration testers.
Together, the three pre-test phases are called reconnaissance. This process seeks to gather as much information about the target network as possible, following these seven steps:
Gather initial information
Determine the network range
Identify active machines
Discover open ports and access points
Fingerprint the operating system
Uncover services on ports
Map the network