Find Access Vulnerability - Learn Latest Computer And MObile hacking Tricks

What generally happens is that an advanced or elite hacker writes a scanning tool
that looks for well-known vulnerabilities, and the elite hacker makes it available
over the Internet. Less experienced hackers, commonly called “script kiddies,” then
run the scanning tool 24 x 7, scanning large numbers of systems and finding many
systems that are vulnerable. They typically run the tool against the name-spaces
associated with companies they would like to get into.

The script kiddies use a list of vulnerable IP addresses to launch attacks, based on
the vulnerabilities advertised by a machine, to gain access to systems. Depending on
the vulnerability, an attacker may be able to create either a privileged or nonprivileged
account. Regardless, the attacker uses this initial entry (also referred to as
a “toe-hold”) in the system to gain additional privileges and exploit the systems the
penetrated system has trust relationships with, shares information with, is on the
same network with, and so on.
Once a toe-hold is established on a system, the attacker can run scanning tools
against all the systems connected to the penetrated system. Depending on the
system compromised, these scans can run inside an organization’s network.