Reconnaissance is the initial step in hacking an information system is to collect as much information as you can. You may start with domain name, from there try to obtain an IP address to open ports, then try to see what operating system is running, and finally see what applications are running and what versions of software are being used to run that system.

Scanning is when you use information gathered in the reconnaissance step to detect vulnerabilities of the targeted system in order to deploy hacking tools. It is common practice that attacker will use automated or semi-automated tools to conduct security surveys and to generate reports of security-related vulnerabilities.

Gaining Access phase is where the actual hacking takes place. Vulnerabilities that were discovered during the reconnaissance and scanning phase are now exploited to gain access. The method of how the hacker was able to exploit a connection can be a local area network (LAN, either wired or wireless), local access to a PC, the Internet, or offline.

In Maintaining Access Phase a hacker has already gained access, and wants to maintain that access for future exploitation and attacks. Hackers sometimes harden a system in order to keep other hackers or security personnel out by securing their exclusive access with backdoors, rootkits, and Trojans. Once the hacker owns the system, they can use it as a base to launch additional attacks.

Covering Tracks Phase is where the hackers have been able to gain and maintain access; they cover their tracks in order to avoid detection by security personnel, also to continue to use the owned system, and to remove evidence of hacking, or to avoid legal action. Hackers try to remove all traces of the attack, such as log files or intrusion detection system (IDS) alarms

The first step I would take would be from the 5 steps to hacking which is the reconnaissance. I would use passive reconnaissance as this pertains to information gathering.

Google is a major tool in most hackers initial first step. But you can use Nmap, AMAP, ScanRand and Paratrace.

Social Engineering is one of the number one ways a network is easily infiltrated. They major forms of this are Phishing, baiting and diversion theft.

Enumeration is the same as scanning a system for vulnerabilities that can be used to attack the system itself. This is vital to any hacker’s object since it reveals the information needed to access the target.

To avoid detection a good hacker will always cover their tracks. This is done by purging any information in the system that could even minutely show the trace that someone was there. You must be careful when doing this because sometimes it’s not what’s there that gets the hacker busted but what wasn’t.