title: Penetration Testing: Network Threat Testing (EC-Council Press)
author: EC-Council
description: The International Council of E-Commerce Consultants (EC-Council) is a member-based organization that certifies individuals in various e-business and security skills. It is the owner and developer of the world famous Certified Ethical Hacker course, Computer Hacking Forensics Investigator program, License Penetration Tester program and various other programs offered in over 60 countries around the globe. These certifications are recognized worldwide and have received endorsements from various government agencies including the US Federal Government via the Montgomery GI Bill, and the US Government National Security Agency (NSA) and the Committee on National Security Systems (CNSS) certifying EC-Council Network Security Administrator (ENSA) program for meeting the 4011 training standard for information security professionals.
zlib_text: Expand - Collapse 
  Penetration Testing Framework 0.59
  n Pre-Inspection Visit - template 
   
  Network Footprinting (Reconnaissance) The tester would attempt to gather as much information as possible about the selected 
  network. Reconnaissance can take two forms i.e. active and passive. A passive attack is always the best starting point as this 
  would normally defeat intrusion detection systems and other forms of protection etc. afforded to the network. This would usually 
  involve trying to discover publicly available information by utilising a web browser and visiting newsgroups etc. An active form would 
  be more intrusive and may show up in audit logs and may take the form of an attempted DNS zone transfer or a social engineering 
  type of attack. 
   
  Whois is widely used for querying authoritative registries/ databases to discover the owner of a domain name, an IP address, 
  or an autonomous system number of the system you are targeting.  
  Authoratitive Bodies
  n IANA - Internet Assigned Nu