During a red team exercise, finding all the potential targets is essential for the success of the engagement. The more hosts you enumerate, the higher your chances of finding relevant vulnerabilities to be exploited. In this course, Reconnaissance with Gobuster, you will learn how to utilize GoBuster to execute reconnaissance in a red team engagement. First, you will explore how to discover DNS subdomains via active scanning. Next, you will learn how to enumerate VHosts via brute forcing and dictionary attacks. Finally, you will gather all the potential targets for your red team engagement. When you’re finished with this course, you’ll have the skills and knowledge to execute the techniques “Active Scanning – Wordlist Scanning” (T1595.003) and “Active Scanning – Scanning IP Blocks” (T1595.001) using GoBuster. More importantly, knowing how these techniques can be used against you, will ultimately lend to your ability as an organization, or an individual, to detect and defend against specific attack vectors.
Author Name: Ricardo Reimao
Author Description:
Ricardo is a Cybersecurity Consultant based in Toronto (Canada). He has 14+ years of IT experience, 10 of them in the IT Security field. His main interests are: SIEM solutions (IBM QRadar), Enterprise Security Risk, Penetration Testing, Security processes/procedures and Network Security.