Competitive footprinting: Gathers information on when the company began, how it developed, where resources are placed and who controls those resources. Is the quick way to get technical and administrative contacts WHOIS footprinting: (phone, e-mail, location) as well as Domain Name Servers, NetRange, etc. DNS footprinting: Takes place when a hacker obtains DNS zone information from the DNS server to gather naming and IP information for resources within the network. Network footprinting: Collects information about a company's network. Active and passive are two types of network footprinting. Passive footprinting involves viewing the company's website. Active footprinting involves gathering information through social engineering. Website and email footprinting: In Website footprinting, a user can make a mirror copy of a Website and download the full Website. After this, the user can look for emails, phone numbers, and employee details if they are present in the Website by digging the full Website. Google hacking: Involves using advanced operators in the Google search engine to locate specific strings of text within search results. Actions for a footprinting attack The attacker/hacker/penetration tester needs to perform the following actions for a footprinting attack: An attacker can find a company's Finding companies external and internal URLs: URL using various types of tools, such as Google search engine, various types of news groups, blogs for sensitive data, etc. Internal URLs provide an insight into different departments and business units in an organization. You can also use trial and error methods. The following tools can be used to search internal URLs: Performing whois lookup: The attacker can use whois queries to determine the IP address ranges associated with clients. A whois query can be run on most UNIX environments. In a Windows environment, the tools such as WsPingPro and Sam Spade can be used to perform whois queries. Whois queries can also be executed over the Web from www.arin.net and www.networksolutions.com. Extracting DNS information: The Domain Name System (DNS) is a hierarchical distributed naming system connected to the Internet or a private network. It translates domain names meaningful to humans into the numerical identifiers associated.
Competitive footprinting: Gathers information on when the company began, how it developed, where resources are placed and who controls those resources. WHOIS footprinting: Is the quick way to get technical and administrative contacts (phone, e-mail, location) as well as Domain Name Servers, NetRange, etc. DNS footprinting: Takes place when a hacker obtains DNS zone information from the DNS server to gather naming and IP information for resources within the network. Network footprinting: Collects information about a company's network. Active and passive are two types of network footprinting. Passive footprinting involves viewing the company's website. Active footprinting involves gathering information through social engineering. Website and email footprinting: In Website footprinting, a user can make a mirror copy of a Website and download the full Website. After this, the user can look for emails, phone numbers, and employee details if they are present in the Website by digging the full Website. Google hacking: Involves using advanced operators in the Google search engine to locate specific strings of text within search results. Actions for a footprinting attack The attacker/hacker/penetration tester needs to perform the following actions for a footprinting attack: Finding companies external and internal URLs: An attacker can find a company's URL using various types of tools, such as Google search engine, various types of news groups, blogs for sensitive data, etc. Internal URLs provide an insight into different departments and business units in an organization. You can also use trial and error methods. The following tools can be used to search internal URLs: Performing whois lookup: The attacker can use whois queries to determine the IP address ranges associated with clients. A whois query can be run on most UNIX environments. In a Windows environment, the tools such as WsPingPro and Sam Spade can be used to perform whois queries. Whois queries can also be executed over the Web from www.arin.net and www.networksolutions.com. Extracting DNS information: The Domain Name System (DNS) is a hierarchical distributed naming system connected to the Internet or a private network. It translates domain names meaningful to humans into the numerical identifiers associated.