Penetration Testing Practice Guide: Tools and methods required for knowledge-Reading Notes (1) Investigation

Objectives:

1. Collect information related to the target. The more information the better.

2. classify all collected information and create a list of IP addresses that can be attacked

 

Active investigation: Includes direct interaction with the target system. It must be noted that in this process, the target may record our IP addresses and activities.

Passive Detection: Massive amount of information obtained from the Internet. When conducting a passive investigation, we do not directly interact with the target, so it is impossible for the target to know or record our activities.

 

Saves collected data in a centralized manner. It is best to save it in electronic format for convenient search.

 

 

Httrack

The website copy server. Using crawlers to copy the entire website, you can create an offline copy that is exactly the same as the target website, including all the webpages, links, images, and code of the original website. But it will be recorded.

 

Google

Google is case insensitive

Site: specified site

Intitle: The webpage title contains any keyword.

Allintitle: The webpage title contains all keywords

Cache: only the information in the Web snapshots is displayed.

Filetype: Find the file with the specified extension, equivalent to ext:

Intext: webpage content inclusion

Link: The webpage that contains the specified Link

Http://www.exploit-db.com/google-dorks/ Google Hacking-Database

 

Whois

Query site information

Whois command

Http://www.whois.com

Http://www.whois.net

 

Nali

Geographic location query tool

Penetration Testing Practice Guide: Tools and methods required for knowledge-Reading Notes (1) Investigation