Passive information gathering, beginning a career in ethical hacking and penetration testing can be
very exciting, and most of the time our wines with the bit hover and causing us to visit all the lectures
about explaining a system in a course such as this.
However, when conducting a penetration test is like a starting new project at home before you build
a pool in your backyard.
There are few things you must consider, such as a space that's available the cost of materials, the
contractors, fees and other details.
Information gathering is a very important phase of the hacking lifecycle and penetration testing.
In this lecture, we will focus actually not in this section in this Section 12, but I think four or
five lectures we will focus on passive information gathering techniques and methods.
We will learn how to use the internet to get us the information and specific details we need about our
target by using both online and tools on Linux.
We will look covering in this lecture.
I create Constance and footprinting understanding passive information gathering, understanding open
source intelligence.
Uh, then using the top, we will use Open-Source Intelligence Tools.
Identify the target technologies and security controls.
Finding links in closed resources.
Understanding who is and copying websites with hash city.
Track and find subdomains using soberly staff and other.
Topics we will cover here, so we have some technical requirements in this section of our course here,
the first we need Colin in here, this is the technical requirements.
So it's sort of a day of condiments for to complete this, uh, lecture.
Now this section of our course successful the first unit Lennox, Kali, Linux, Maltego, Richaun Energy.
I like the harvester.
Like, we'll see a framework, we will do all of it.
Uh, frame work here detracts.
Track like, uh, S3 scanner.
And so at least a year, very Constance, and footprinting the various phases of hacking include recon
stands, scanning, gaining access, maintaining access and then clearing tracks, so the reconnaissance
phase is the most important phase of penetration test signs.
This is when the ethical hacker or penetration tester conducts extensive research into gathering as
much information about the target as possible.
Furthermore, footprinting both help create a profile of the target gathering, providing information
such as running services, open ports and operating system.
We will look.
We will now look at both reconnaissance and footprinting in more detail because reconnaissance here.
I reckon it's you from a military perspective, reconnaissance is the observation and research of an
enemy target in cyber security as a penetration testing, the use of various tools and techniques to
gather detailed information about the target organization and its underlying infrastructure.
Reconnaissance is vital in the field of penetration testing as a plantation tester.
We need to know more about our target, as well as its vulnerabilities and operating systems before
we attempt to gain access via exploitation.
Of course, the information gathered at during the reconnaissance is phase.
Will you help us to choose the right tools and techniques to successfully exploit the target?
Uh, reconnaissance can be divided into two categories.
Uh, the first is passive reconnaissance and active.
So Passive Recon stands, uh, using an indirect approach and does not engage to target.
But active reconnaissance is directly engages to the target to gather specific details.
Footprinting we have here, the footprinting is the predator, whereby as much information as possible
is is gathered in relation to target in footprinting.
The objective is to obtain the specific details about the target, such as its operating systems and
service versions of running applications for printing.
So the information that's collected can be used in various ways to gain access to the target system
network or the organization.
Footprinting allows a penetration test there to understand the security posture of the target infrastructure,
quickly identify security vulnerabilities on the target system and networks, and create a network map
of their organization and reduce the area of focus to the specific IP addresses, domain names and the
types of device devices regarding which information is required.
Footprinting is a part of the reconnaissance phase.
All over science footprint is able to provide more specific details about the target we can consider
quote pretending to be a subset of the reconnaissance phase.
So, um, the uh, there are the main objectives of footprinting, the which is collecting collecting
network information in full here like domain names, uh, IP addresses and uh and the network protocols
network protocol senior and uh, second is the collecting system information, uh, collecting, collecting,
think, uh, system information here like user and group.
Names by recruiting table.
Table system names.
Names and times, and lastly, is the collection collecting organization organization information like,
for example, employ include details.
Company director, company directory and location, location, location details to successful obtain
about the target, I will recommend using the footprinting, uh, methodology like that.
For example, checking search engines, check, uh, Yahoo, Bing and Google Perform Pair, uh, form,
Google, uh, hiking and we.
This is not a bad thing, just an advanced Google search technique and an advance of Google search search.
Take me.
Here and now, like in four in four gathering social media.
Uh, Trump, social media like Facebook, uh, LinkedIn, um, for Instagram and Twitter, of course.
And their footprinting, the company's website, so you can, uh, footprint, uh, footprint components
website.
With applications as well, both print, uh, companies.
Website.
You know, perform Emile Footprinting performed Emile Footprinting, food printing techniques.
We will discuss all about.
You will learn how to perform this footprinting the Vatican later.
It is just the introduction course of our section, you'll them, you lose the WHO is command to perform,
perform DNS foot printing and the need for a goes excuse, northrop footprinting tech news and use social
engineering.
The most important?
So you are not able to differentiate between reconnaissance and footprinting, both reconnaissance and
footprinting are required during penetration testing as each provides vital information about the target.
And in this the next hour, we will take a deep dive into passive information gathering.