Ethical Hacking: Footprinting and Reconnaissance

Introduction

• Scouting the target
• What you should know
• Hacking ethically

1. Uncovering Information

• Footprinting and reconnaissance
• Using competitive intelligence
• Investigating business sites
• Searching and Google hacking
• Employing social engineering
• Gathering data on people
• Tracking online reputation

2. Using Email and Websites

• Harvesting email addresses
• Examining websites
• Scraping websites
• Challenge: Mirroring a website
• Solution: Mirroring a website
• Monitoring websites

3. Searching the Network

• Footprinting using DNS
• Examining a zone transfer
• Generating domain names
• Determining the path
• Using nslookup and DIG

4. Discovering Reconnaissance Tools

• Using OSINT tools
• Investigating email
• Footprinting VoIP and VPNs
• Going to the dark web
• Exploring other footprinting tools

5. Footprinting Capstone

• Conducting a forensic exercise
• Examining an email
• Diving into an email header
• Verifying IP blocklists

6. Wrapping up the Recon

• Guarding social media
• Writing footprinting reports
• Countering footprinting
• Next steps