Step 1 - Footprinting

The first step in any pentest is to gather as much information about the target(s) as possible. This can be done through DNS enumeration, visiting the companies webpage, ping sweeps and other google searches.

For my lab I didn't have any google searches, or dns entries to look at so I skipped straight ahead to looking for active hosts on the target network.

Back Track has a variety of tools that can help you identify live hosts. I used Angry IP Scanner to look for hosts.

Angry IP is pretty easy to use, just put in the network range and hit go

The results show that there are 3 hosts alive on my network. I wonder what they are?