Since we plan to utilize a similar technique for an upcoming pen test, we would like to browse through the experience in the same way that a user would. The initial page has a lot of additional links and javascript. We're not certain how the attacker is successfully compromising the end point system. Here's one common scenario for this: Users are being compromised via a social media link that is making the rounds on facebook or a similar social media site. In order to study the behaviors of a malicious attacker, or a piece of malware, we might want to connect to an attacker controlled resource. Second, is to obscure the source of our pen testing recon or attack activities.
First, is to connect to malicious (or suspected malicious) resources when we perform research. Pen testers have two basic reasons for obscuring their source IP address. This post is to share a method I use for obscuring the source IP address of my computer. Malicious attackers have no such restrictions. We pen testers need to train ourselves to behave like those with malicious intent, but simultaneously maintain appropriate decorum and sensitivity to the operations of the networks we're trying to improve. Pen testing derives its value from being able to emulate the behavior of real world attackers.
0 kommentar(er)
