CEH Practical: Information-Gathering Methodology


Information gathering can be broken into seven logical steps. Footprinting is performed during the first two steps of unearthing initial information and locating the network range.


Footprinting is defined as the process of establishing a scenario or creating a map of an organization's network and systems. Information gathering is also known as footprinting an organization. Footprinting is an important part of reconnaissance process which is typically used for collecting possible information about a targeted computer system or network. Active and Passive both could be Footprinting. The example of passive footprinting is assessment of a company's website, whereas attempting to gain access to sensitive information through social engineering is an example of active information gathering. Basically footprinting is the beginning step of hacker to get hacked someone because having information about targeted computer system is the main aspect of hacking. If you have an information about individual you wanna hack so you can easily hacked that individual. The basic purpose of information gathering is at least decide what type of attacks will be more suitable for the target. Here are some of the pieces of information to be gathered about a target
during footprinting:
  • Domain name
  • Network blocks
  • Network services and applications
  • System architecture
  • Intrusion detection system
  • Authentication mechanisms
  • Specific IP addresses
  • Access control mechanisms
  • Phone numbers
  • Contact addresses
Once this information is assemble, it can give a hacker better perception into the organization, where important information is stored, and how it can be accessed.

Footprinting Tools 

Footprinting can be done using hacking tools, either applications or websites, which allow the hacker to locate information passively. By using these footprinting tools, a hacker can gain some basic information on, or "footprint," the target. By first footprinting the target, a hacker can eliminate tools that will not work against the target systems or network. For example, if a graphics design firm uses all Macintosh computers, then all hacking software that targets Windows systems can be eliminated. Footprinting not only speeds up the hacking process by eliminating certain tool sets but also minimizes the chance of detection as fewer hacking attempts can be made by using the right tool for the job. Some of the common tools used for footprinting and information gathering are as follows:
  • Domain name lookup
  • Whois
  • NSlookup
  • Sam Spade
Before we discuss these tools, keep in mind that open source information can also yield a wealth of information about a target, such as phone numbers and addresses. Performing Whois requests, searching domain name system (DNS) tables, and using other lookup web tools are forms of open source footprinting. Most of this information is fairly easy to get and legal to obtain.

Footprinting a Target 

Footprinting is part of the preparatory pre-attack phase and involves accumulating data regarding a target's environment and architecture, usually for the purpose of finding ways to intrude into that environment. Footprinting can reveal system vulnerabilities and identify the ease with which they can be exploited. This is the easiest way for hackers to gather information about computer systems and the companies they belong to. The purpose of this preparatory phase is to learn as much as you can about a system, its remote access capabilities, its ports and services, and any specific aspects of its security.

DNS Enumeration

DNS enumeration is the process of locating all the DNS servers and their corresponding records for an organization. A company may have both internal and external DNS servers that can yield information such as usernames, computer names, and IP addresses of potential target systems.

NSlookup and DNSstuff

One powerful tool you should be familiar with is NSlookup (see Figure 2.2). This tool queries DNS servers for record information. It's included in Unix, Linux, and Windows operating systems. Hacking tools such as Sam Spade also include NSlookup tools. Building on the information gathered from Whois, you can use NSlookup to find additional IP addresses for servers and other hosts. Using the authoritative name server information from Whois ( AUTH1.NS.NYI.NET ), you can discover the IP address of the mail server.


nslookup www.sitename.com
nslookup www.usociety4.com
Performing DNS Lookup
This search reveals all the alias records for www.google.com and the IP address of the web server. You can even discover all the name servers and associated IP addresses.

Understanding Whois and ARIN Lookups

Whois evolved from the Unix operating system, but it can now be found in many operating systems as well as in hacking toolkits and on the Internet. This tool identifies who has registered domain names used for email or websites. A uniform resource locator (URL), such as www.Microsoft.com , contains the domain name ( Microsoft.com ) and a hostname or alias ( www ).
The Internet Corporation for Assigned Names and Numbers (ICANN) requires registration of domain names to ensure that only a single company uses a specific domain name. The Whois tool queries the registration database to retrieve contact information about the individual or organization that holds a domain registration.

Using Whois

  • Go to the DNSStuff.com website and scroll down to the free tools at the bottom of the page.
  • Enter your target company URL in the WHOIS Lookup field and click the WHOIS button.
  • Examine the results and determine the following:
    • Registered address
    • Technical and DNS contacts
    • Contact email
    • Contact phone number
    • Expiration date
  • Visit the company website and see if the contact information from WHOIS matches up to any contact names, addresses, and email addresses listed on the website.
  • If so, use Google to search on the employee names or email addresses. You can learn the email naming convention used by the organization, and whether there is any information that should not be publicly available.


whois sitename.com
whois usociety4.com

Continue reading
  1. Hacking App
  2. Hacking Tools Free Download
  3. Hack Tools
  4. Pentest Tools Online
  5. Hack Tools 2019
  6. Top Pentest Tools
  7. Pentest Tools Website Vulnerability
  8. Usb Pentest Tools
  9. Pentest Tools For Ubuntu
  10. Pentest Tools Bluekeep
  11. Hacking Tools Pc
  12. Usb Pentest Tools
  13. Pentest Tools Website
  14. Hack Rom Tools
  15. Pentest Tools For Mac
  16. Nsa Hack Tools
  17. Black Hat Hacker Tools
  18. Pentest Tools Tcp Port Scanner
  19. Hacker Tools Online
  20. Hacking Tools Hardware
  21. Free Pentest Tools For Windows
  22. Hack Tools For Games
  23. New Hacker Tools
  24. Hacker Tools Linux
  25. Easy Hack Tools
  26. Hack Tools For Mac
  27. Pentest Tools Website
  28. Hack Tool Apk
  29. Hacker Tools Free
  30. Hacking Tools Name
  31. Hacking Tools Free Download
  32. Pentest Tools For Android
  33. Best Pentesting Tools 2018
  34. Hacking Tools Windows 10
  35. Hacking Tools For Windows 7
  36. Hacker Tools Windows
  37. Hack Tools Mac
  38. Hacker Tools Apk Download
  39. Nsa Hack Tools Download
  40. Best Hacking Tools 2019
  41. Hack Tools
  42. Hacker Tools Github
  43. Hacker Tools List
  44. Hacker Tools Linux
  45. Hacks And Tools
  46. Hacking Tools
  47. Hacking Tools 2020
  48. Hacker Tools Online
  49. Tools Used For Hacking
  50. Pentest Tools Framework
  51. Hacking Tools For Windows Free Download
  52. Tools For Hacker
  53. Hacker Tools Github
  54. Top Pentest Tools
  55. Hacker Techniques Tools And Incident Handling
  56. Hacker Tools List
  57. New Hack Tools
  58. Easy Hack Tools
  59. Hacking Tools For Windows
  60. Black Hat Hacker Tools
  61. Hacker Tools 2020
  62. Hacker Tools Github
  63. Hacker Tools Mac
  64. Hacker Tools Online
  65. Hacker Tools Software
  66. Hacker Techniques Tools And Incident Handling
  67. Hacking Tools Software
  68. Github Hacking Tools
  69. Hack App
  70. Beginner Hacker Tools
  71. Wifi Hacker Tools For Windows
  72. What Is Hacking Tools
  73. Nsa Hacker Tools
  74. Hacker Tool Kit
  75. Computer Hacker
  76. Pentest Tools Apk
  77. Hacking Tools Name
  78. Hacking Tools Kit
  79. Nsa Hack Tools Download
  80. Tools For Hacker
  81. Beginner Hacker Tools
  82. Hacking Tools
  83. Hacker Techniques Tools And Incident Handling
  84. Github Hacking Tools
  85. New Hacker Tools
  86. Bluetooth Hacking Tools Kali
  87. Tools Used For Hacking
  88. Hack Tools For Pc
  89. Beginner Hacker Tools
  90. Pentest Tools Url Fuzzer
  91. Pentest Reporting Tools
  92. Pentest Tools Apk
  93. Pentest Tools Online
  94. Pentest Tools Linux
  95. Hak5 Tools
  96. Hacking Tools For Windows 7
  97. Hack App
  98. Pentest Tools Free
  99. Hacker Tools Windows
  100. Hacking Tools 2019
  101. Hacker Tools Apk
  102. Hack Tools Pc
  103. Hacking Tools Software
  104. New Hack Tools
  105. Android Hack Tools Github
  106. Hacker Hardware Tools
  107. Hacking Tools For Windows Free Download
  108. New Hack Tools
  109. Hak5 Tools
  110. Hack Tools
  111. Beginner Hacker Tools
  112. Black Hat Hacker Tools
  113. Github Hacking Tools
  114. Pentest Tools For Windows
  115. Hacking Apps
  116. Pentest Automation Tools
  117. Kik Hack Tools
  118. World No 1 Hacker Software
  119. Termux Hacking Tools 2019
  120. Hacker Tools For Ios
  121. Hacker Techniques Tools And Incident Handling
  122. Pentest Tools Bluekeep
  123. Hacker
  124. Pentest Tools Kali Linux
  125. Hacking Tools Name
  126. Hacking Tools Windows
  127. Hacking Tools For Pc
  128. Hack Website Online Tool
  129. Pentest Tools Windows
  130. Hacking Tools Software
  131. Github Hacking Tools
  132. Pentest Tools Website Vulnerability
  133. How To Hack
  134. Hacking Tools Usb
  135. Pentest Tools Tcp Port Scanner
  136. Physical Pentest Tools
  137. Hacker Tools Apk Download
  138. Hacking Tools Software
  139. Pentest Tools Subdomain
  140. Hacking Tools
  141. Hacking Apps
  142. Nsa Hacker Tools
  143. Kik Hack Tools
  144. Hack Website Online Tool
  145. Pentest Tools Tcp Port Scanner
  146. Hacker Tools Windows
  147. Hacker Tools For Pc
  148. Hacking Tools Download
  149. Pentest Tools Open Source
  150. Hak5 Tools
  151. Kik Hack Tools
  152. Game Hacking

Post a Comment

Previous Post Next Post