This is how an attacker can understand the underlying operating system of other network nodes that eventually may lead to vulnerability exposure. Therefore, most of the times, the attacker chooses to perform passive reconnaissance and passive OS fingerprinting is one of the most popular techniques. Active reconnaissance (active scanning) provides better accuracy while performing reconnaissance although with a higher chance of being exposed to the Intrusion Detection Systems (IDS). Passive Operating System Fingerprinting by Analyzing PCAP filesĪttackers can perform active or passive reconnaissance once they compromise an asset within an internal network.
0 kommentar(er)
