Track 6 of 12
Reconnaissance and assessment
Find out what is exposed before somebody else does.
Intermediate 5 lessons Prerequisite: Networking, and the security fundamentals track.
Every assessment starts by answering a boring question: what do I actually have? This track teaches the phases security work moves through, how to inventory your own devices, how to read a port scan rather than just run one, what a service version tells you, and how to judge whether a finding is worth acting on. You scan your own device and your own network, and nothing else.
By the end, you can describe what is running on your own devices, read a scan properly, and judge a version or a finding on evidence.
Lessons in this track
- 01 The phases of a security assessment Learn the order that security work happens in, and run the first steps on your own phone.
- 02 Taking inventory of your own devices Build a plain list of what your own device has, with commands that need no root.
- 03 Reading a port scan properly Run nmap against your own phone and learn what each line of the output is telling you.
- 04 Service versions and what they tell you Ask an open port what service and version is behind it, and read the banner it sends back.
- 05 Finding and judging a vulnerability Turn a version string into a decision, without overreacting to every old number you find.