CEH Practical: Information-Gathering Methodology

 

Information gathering can be broken into seven logical steps. Footprinting is performed during the first two steps of unearthing initial information and locating the network range.

Footprinting

Footprinting is defined as the process of establishing a scenario or creating a map of an organization's network and systems. Information gathering is also known as footprinting an organization. Footprinting is an important part of reconnaissance process which is typically used for collecting possible information about a targeted computer system or network. Active and Passive both could be Footprinting. The example of passive footprinting is assessment of a company's website, whereas attempting to gain access to sensitive information through social engineering is an example of active information gathering. Basically footprinting is the beginning step of hacker to get hacked someone because having information about targeted computer system is the main aspect of hacking. If you have an information about individual you wanna hack so you can easily hacked that individual. The basic purpose of information gathering is at least decide what type of attacks will be more suitable for the target. Here are some of the pieces of information to be gathered about a target
during footprinting:

• Domain name
• Network blocks
• Network services and applications
• System architecture
• Intrusion detection system
• Authentication mechanisms
• Specific IP addresses
• Access control mechanisms
• Phone numbers
• Contact addresses

Once this information is assemble, it can give a hacker better perception into the organization, where important information is stored, and how it can be accessed.

Footprinting Tools 

Footprinting can be done using hacking tools, either applications or websites, which allow the hacker to locate information passively. By using these footprinting tools, a hacker can gain some basic information on, or "footprint," the target. By first footprinting the target, a hacker can eliminate tools that will not work against the target systems or network. For example, if a graphics design firm uses all Macintosh computers, then all hacking software that targets Windows systems can be eliminated. Footprinting not only speeds up the hacking process by eliminating certain tool sets but also minimizes the chance of detection as fewer hacking attempts can be made by using the right tool for the job. Some of the common tools used for footprinting and information gathering are as follows:

• Domain name lookup
• Whois
• NSlookup
• Sam Spade

Before we discuss these tools, keep in mind that open source information can also yield a wealth of information about a target, such as phone numbers and addresses. Performing Whois requests, searching domain name system (DNS) tables, and using other lookup web tools are forms of open source footprinting. Most of this information is fairly easy to get and legal to obtain.

Footprinting a Target 

Footprinting is part of the preparatory pre-attack phase and involves accumulating data regarding a target's environment and architecture, usually for the purpose of finding ways to intrude into that environment. Footprinting can reveal system vulnerabilities and identify the ease with which they can be exploited. This is the easiest way for hackers to gather information about computer systems and the companies they belong to. The purpose of this preparatory phase is to learn as much as you can about a system, its remote access capabilities, its ports and services, and any specific aspects of its security.

DNS Enumeration

DNS enumeration is the process of locating all the DNS servers and their corresponding records for an organization. A company may have both internal and external DNS servers that can yield information such as usernames, computer names, and IP addresses of potential target systems.

NSlookup and DNSstuff

One powerful tool you should be familiar with is NSlookup (see Figure 2.2). This tool queries DNS servers for record information. It's included in Unix, Linux, and Windows operating systems. Hacking tools such as Sam Spade also include NSlookup tools. Building on the information gathered from Whois, you can use NSlookup to find additional IP addresses for servers and other hosts. Using the authoritative name server information from Whois ( AUTH1.NS.NYI.NET ), you can discover the IP address of the mail server.

Syntax

nslookup www.sitename.com

nslookup www.usociety4.com

Performing DNS Lookup

This search reveals all the alias records for www.google.com and the IP address of the web server. You can even discover all the name servers and associated IP addresses.

Understanding Whois and ARIN Lookups

Whois evolved from the Unix operating system, but it can now be found in many operating systems as well as in hacking toolkits and on the Internet. This tool identifies who has registered domain names used for email or websites. A uniform resource locator (URL), such as www.Microsoft.com , contains the domain name ( Microsoft.com ) and a hostname or alias ( www ).
The Internet Corporation for Assigned Names and Numbers (ICANN) requires registration of domain names to ensure that only a single company uses a specific domain name. The Whois tool queries the registration database to retrieve contact information about the individual or organization that holds a domain registration.

Using Whois

• Go to the DNSStuff.com website and scroll down to the free tools at the bottom of the page.
• Enter your target company URL in the WHOIS Lookup field and click the WHOIS button.
• Examine the results and determine the following:
  
  • Registered address
  • Technical and DNS contacts
  • Contact email
  • Contact phone number
  • Expiration date

• Visit the company website and see if the contact information from WHOIS matches up to any contact names, addresses, and email addresses listed on the website.

• If so, use Google to search on the employee names or email addresses. You can learn the email naming convention used by the organization, and whether there is any information that should not be publicly available.

Syntax

whois sitename.com
whois usociety4.com

Related posts

1. Hack Website Online Tool
2. Hackrf Tools
3. Growth Hacker Tools
4. Hack And Tools
5. Hacker Search Tools
6. Pentest Tools Kali Linux
7. Beginner Hacker Tools
8. Hack Tool Apk
9. Hacker Tools Free
10. Top Pentest Tools
11. Hacker Tools For Ios
12. Hacker Tools Free Download
13. Github Hacking Tools
14. Best Hacking Tools 2019
15. Hacking Tools Windows
16. Hack Tool Apk No Root
17. Hacking Tools For Windows 7
18. Hacker Tools Mac
19. Hacker Tools Apk
20. Hacker Tools Windows
21. Pentest Tools Windows
22. Pentest Tools Subdomain
23. Ethical Hacker Tools
24. Hack Rom Tools
25. How To Make Hacking Tools
26. Nsa Hack Tools Download
27. Physical Pentest Tools
28. Hack Tools For Pc
29. Pentest Tools Website Vulnerability
30. Hacking Tools Windows
31. Hack And Tools
32. Hacking Tools Hardware
33. Pentest Tools For Windows
34. Pentest Tools Android
35. Hacker Tools Free
36. Hack App
37. Github Hacking Tools
38. Hacker Search Tools
39. Pentest Tools Website Vulnerability
40. Hacker Tools
41. Hacking Tools Free Download
42. Kik Hack Tools
43. Hacker Tools List
44. Hacker Search Tools
45. Hack Tools For Games
46. Tools For Hacker
47. Pentest Tools For Android
48. Android Hack Tools Github
49. Hacking Tools Windows
50. Hacking Tools Usb
51. How To Install Pentest Tools In Ubuntu
52. Best Hacking Tools 2019
53. Tools For Hacker
54. Hacking Apps
55. Hackers Toolbox
56. Hack Tools 2019
57. Hacker Tools 2019
58. Hack Tool Apk No Root
59. Hacking Tools Windows 10
60. Physical Pentest Tools
61. Hacker Tools Apk
62. Pentest Tools Nmap
63. Easy Hack Tools
64. Pentest Tools Windows
65. Pentest Tools Online
66. What Is Hacking Tools
67. Pentest Tools List
68. Install Pentest Tools Ubuntu
69. Hacker Tools Linux
70. What Is Hacking Tools
71. Pentest Tools Github
72. What Are Hacking Tools
73. How To Install Pentest Tools In Ubuntu
74. Pentest Tools Open Source
75. Hacker Tools Online
76. Pentest Tools Download
77. Hacker Tools For Windows
78. Growth Hacker Tools
79. Hacking Tools Pc
80. Pentest Tools Online
81. Pentest Box Tools Download
82. Hacking Tools Github
83. Hacking Tools Github
84. Pentest Tools Open Source
85. Game Hacking
86. Hacker Tools For Pc
87. Hack Tools For Windows
88. Hacking Tools Windows 10
89. Hacking App
90. Hack Tools Github
91. Bluetooth Hacking Tools Kali
92. Hacking Tools Windows
93. Hacker Tools For Mac
94. Hack Tools 2019
95. Hacker Tools For Windows
96. Hacking Tools Mac
97. Hacking Tools Windows
98. Game Hacking
99. Android Hack Tools Github
100. Hacking Tools Download
101. Tools Used For Hacking
102. Hack Apps
103. Pentest Automation Tools
104. Hacker Search Tools
105. Pentest Tools Framework
106. Hacker Tools Linux
107. Free Pentest Tools For Windows
108. Hacking Tools Free Download
109. Hacking Tools Free Download
110. Hacker Tools Hardware
111. Hacking Tools Github
112. Hacker Tools Apk
113. Hacking Tools For Kali Linux
114. Hack Tool Apk
115. Hacking Tools 2019
116. Tools 4 Hack
117. Hacking Tools Online
118. Pentest Tools Open Source
119. Hacker Tools Free Download
120. Hacking Tools Github
121. Hacking Apps
122. Hack Tools Github
123. Hacking Tools And Software
124. Pentest Tools Tcp Port Scanner
125. Ethical Hacker Tools
126. Pentest Tools Apk
127. Hacking Tools
128. Hack Tools For Windows
129. Hacking App
130. Hack Tools
131. Termux Hacking Tools 2019
132. Hacking Tools Github
133. Hacker Tools Free Download
134. Tools 4 Hack
135. Hacking Tools 2019
136. Hack Rom Tools
137. Pentest Tools Open Source
138. Android Hack Tools Github
139. Tools 4 Hack
140. Ethical Hacker Tools
141. Pentest Tools Windows
142. Hacker Tools Hardware
143. Install Pentest Tools Ubuntu
144. Hacking Tools Windows
145. Pentest Tools Find Subdomains
146. Pentest Tools Url Fuzzer
147. Pentest Tools Free
148. Hacking Tools Github
149. Bluetooth Hacking Tools Kali
150. Hack Website Online Tool
151. Hacker Tools For Mac
152. New Hack Tools
153. Hacker Tools Free
154. Pentest Tools
155. Hacking Tools For Mac
156. Hacking Tools For Mac
157. Computer Hacker
158. Hacker Tools Apk
159. Hack Apps
160. Pentest Tools Android
161. Hacking Tools Name
162. Black Hat Hacker Tools
163. Hacking Tools Usb
164. Black Hat Hacker Tools
165. Hacker Tools Free Download
166. Hacker Tools Mac
167. Hacking Tools Mac
168. Hacker Security Tools
169. Hack Tools For Mac
170. Pentest Tools
171. Pentest Tools Apk
172. Pentest Tools Linux
173. Hack Apps
174. Hacker Tools For Ios
175. Hacker Tools Hardware