If an attacker is doing reconnaissance on a company, information found on ARIN.net can be used as a weapon. For this task, be prepared to think and research like a hacker.
December 4, 2017
About This Challenge
ARIN.net can be a wealth of information for an attacker since IP blocks belonging to a company can often be identified. An attacker can gather dangerous information without sending any packets to the target network, therefore, avoiding identification.
While researching, decide whether or not individuals should be listed by name as points of contact, or by position. If inaccuracies are found, report them to ARIN.net to be corrected with authorization from your organization.
Disclaimer: Ensure any activities undertaken on your work network are allowed by your corporate policy and approved by management at your organization.
Follow The Instructions To Complete Today’s Network Defender Task:
Feel free to download the PDF version of the directions for your review.
Head over to the American Registry for Internet Numbers, or more commonly, ARIN, at https://www.arin.net. Use their SEARCH Whois function and locate your company, or another company, if you cannot locate your own. (Smaller companies may not be preset in the ARIN database).
Answer the following questions:
1. What IP blocks are assigned to the company?
2. What Autonymous System (AS Number) is assigned to the company?
3. What point of contact (POC) records are listed?
4. Are the records current and accurate?
5. Are individuals or teams listed?
6. What does this information mean for the security of your or their systems?
Once you’ve followed these directions, scroll down to mark this challenge complete.
IT Security Training To Prepare You For War
Loving The Challenge And Want More Great StormWind Content? Contact Us To Schedule A Security Training Consultation
Why Over 100,000 Techs Believe In StormWind Studios
StormWind Studios is to IT training what George Lucas is to Star Wars. We take industry experts, add serious special effects, and deliver the most exciting, compelling live IT training on the planet – see for yourself during our Network Defender 5-Day Challenge
Signing up for Stormwind is one of the best education decisions I've made and I strongly recommend them to anyone interested in studying IT.Jon Lincoln
One of the coolest parts about this course (CEH) was that lectures were recorded daily, so you could make up any missed time without a lot of headache or heartache. I just took the Certified Ethical Hacker test, and I’m pleased to say that I passed on the first try.Dave Cork
I took StormWind classes and labs- absolutely OUTSTANDING! I did those just prior to going for my certification exam and passed it with a 923 out of 1000.Ron Marx
It has made a sizable impact with our company, our offerings to our client base, and my personal career. I am looking forward to this new position with my employer in San Antonio, thanks to StormWind.Mike Lind