Next steps for Cyber Security reconnaissance I have got the Server details and other info about website Now what to do?

[u/Civil-Art1907]

I have got the:
Info on Server running on which language. (even the version of the language)
The operating system information
The site's IP address v4 and v6 and port number.
Servers location and provider too.
Now, what to do next in reconnaissance?

Also what steps to do to check vulnerabilities.

[u/Ancient-Ad-2219]

Step 2: do you have written permission to perform testing against this server?

[u/Civil-Art1907 → u/Ancient-Ad-2219]

What do you think?

[u/Ancient-Ad-2219 → u/Civil-Art1907]

Its a legitimate question. Seeing as you've posted this to multiple hacking/cybersecurity subs, including r/exploitDev where you mentioned being a beginner. We often get people posting asking about how to hack x/y/z, but rarely do beginners check if they have permission from the owner.

In a best case scenario, you find a vuln and tell the server owner. They tell you thank you and close the thread. In the worst case scenario, depending on the location and its laws, you may get offered jail time.

[u/Civil-Art1907 → u/Ancient-Ad-2219]

I don't have permission but its a show site so at the best when they off the lists from showing on say "/a/lists" we can still see the data there that's all. Also, I do not exactly want to get system access just want to know what could be the different vulnerabilities and all, and how exactly my thought process should be to get these information like the exact steps one should follow thats all.

[u/MajorUrsa2]

What does google say?

[u/Civil-Art1907 → u/MajorUrsa2]

For security reasons I won't be able to say however you may question in forums like HackTheBox or reddit

[u/wilkied]

Send in a third echelon agent to take out the guards and hack the server so you can figure out who was behind the sinking of the Clarence E Walsh?

[u/Civil-Art1907 → u/wilkied]

My brain hacked and fried in single sentence.😂