Download Safari Books Online apps: Apple iOS | Android

Entire Site

Safari Books Online

    Free Trial

    Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.


    Copyright
    About the Authors
    Pt. 1. From Vulnerability to Patch
    Pt. 2. Network Security Evaluation
    Ch. 12. Introducing the INFOSEC Evaluation Methodology
    Ch. 13. Before the Evaluation Starts
    Ch. 14. Setting Expectations
    Ch. 15. Scoping the Evaluation
    Ch. 16. Legal Principles for Information Security Evaluations
    Ch. 17. Building the Technical Evaluation Plan
    Ch. 18. Starting Your Onsite Efforts
    Ch. 19. Network Discovery Activities
    Ch. 20. Collecting the Majority of Vulnerabilities
    Ch. 21. Fine-Tuning the Evaluation
    Ch. 22. The Onsite Closing Meeting
    Ch. 23. Post-Evaluation Analysis
    Ch. 24. Creating Measurements and Trending Results
    Ch. 25. Trending Metrics
    Ch. 26. Final Reporting
    Ch. 27. Summing Up the INFOSEC Evaluation Methodology
    Introduction
    The Pre-Evaluation Phase
    The Onsite Evaluation
    The Post-Evaluation Phase
    Examples of INFOSEC Tools by Baseline Activity
    Port Scanning
    SNMP Scanning
    Enumeration and Banner Grabbing
    Wireless Enumeration*
    Vulnerability Scanning
    Host Evaluation
    Network Device Analysis
    Password-Compliance Testing
    Application-Specific Scanning
    Network Protocol Analysis
    Technical Evaluation Plan Outline and Sample
    Sample Technical Evaluation Plan
    Evaluation Points of Contact
    Methodology Overview
    Organizational and System Criticality Information
    Detailed Network Information
    Customer Concerns
    Customer Constraints
    Rules of Engagement
    Internal and External Customer Requirements
    Coordination Agreements
    Letter of Authorization
    Timeline of Evaluation Events
    Pt. 3. Business Continuity & Disaster Recovery
    Index
    • Create BookmarkCreate Bookmark
    • Create Note or TagCreate Note or Tag
    • DownloadDownload
    • PrintPrint
    Share this Page URL
    Help

    Chapter 27. Summing Up the INFOSEC Evalu... > Enumeration and Banner Grabbing

    Enumeration and Banner Grabbing

    Tool Name: Winfingerprint (v.0.6.2)

    Developer: Vacuum

    Platform/OS: Microsoft Windows

    Commercial or Freeware? Freeware

    URL: http://winfingerprint.sourceforge.net

    Note

    Winfingerprint is a host/network enumeration and scanning tool. It is capable of the following scan types: TCP, UDP, ICMP, RPC, SMB, and SNMP. If you ant to do TCP SYN scans, you must have WinPcap installed as well. Otherwise the scans will be nonblocking connect() based.



      

    You are currently reading a PREVIEW of this book.

                                                                                            

    Get instant access to over
    $1 million worth of books and videos.

      

    Start a Free Trial