Resumen |
When a security assessment is executed, time and resources are limited therefore it is essential to identify those points that are most likely vulnerable and focus on those. Such points are identified in the information gathering stage turning it in a vital step during the assessment. Emerging a question about if gathered information could be manipulated by a third party either by functionality or by obscuring information goals. This paper propose an information classifier in order to identify obfuscated information, classifying into obfuscated or integral information, with the purpose to be used during a “black box pentesting” assessment |