In the Hack The Box Information Gathering module, I explored a range of techniques for extracting useful information from targets. Here are the key areas I worked on: - Creepy Crawling with Web Crawlers: Using web crawlers, I learned to map a website’s structure, revealing hidden directories, parameters, and sometimes even sensitive data left exposed. Tools like dirbuster and gobuster proved invaluable for this. - The Power of DNS: The lessons emphasized how much can be learned from DNS records, including zone transfers, subdomain enumeration, and even bruteforcing virtual hosts. This opened my eyes to how misconfigured DNS can lead to critical data leaks. - Automating Reconnaissance: To save time, I explored automation tools that streamline the reconnaissance process. Combining scripts and tools like nmap and curl, I practiced collecting detailed data efficiently.

Meanwhile, in class, our Project 4 centered on blending offense and defense strategies to improve network security while automating processes. My contributions revolved around: - Custom Python Scripts for Scanning: I developed a script to automate nmap scans, allowing flexible options like continuous monitoring, spoofing IP addresses, and transforming raw XML outputs into readable HTML reports. Timestamped results added clarity and traceability to the findings. - Using Firewalls and Intrusion Detection: Collaborating with teammates, we configured firewalls and employed tools like Snort for detecting malicious activities. This gave me a solid understanding of how to balance offensive testing with defensive measures. - Bringing It All Together: One of the highlights of the project was creating a seamless workflow for scanning, detection, and alerting, which we demonstrated in a live presentation. Seeing these components work together reaffirmed the importance of automation and proactive defense in cybersecurity.

This blend of learning helped me bridge the gap between understanding theory and applying it to real-world scenarios. It’s fascinating to see how small details, such as a misconfigured DNS record or unprotected web endpoint, can unravel an entire security posture.

I’m thrilled with the progress I’ve made in understanding the nuances of information gathering. Moving forward, my goal is to enhance my skills in advanced reconnaissance techniques while applying what I’ve learned to new environments.