🔓 Step 3: Gaining Access So far: 🔎 Reconnaissance → Find information 📡 Scanning → Find open ports and services Now we try to get in. Gaining access is when an attacker uses a weakness in the system to gain unauthorized access. That weakness could be: • Weak password • Vulnerable software • Misconfiguration • Web vulnerability Simple example You find a server running SSH on port 22. Then you discover the account has a weak password. Trying that password and getting into the server = Gaining Access. Think of it like a house: Reconnaissance → Find the house Scanning → Find the doors Gaining Access → Find a way through the door. Next: Step 4 — Maintaining Access
August 31, 2026 124 1